[ { "name": "accesschk.exe", "category": "sysinternals", "original_filenames": [ "accesschk.exe" ], "primary": "accesschk.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/accesschk.exe/" }, { "name": "accesschk64.exe", "category": "sysinternals", "original_filenames": [ "accesschk.exe" ], "primary": "accesschk.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/accesschk64.exe/" }, { "name": "accessenum.exe", "category": "sysinternals", "original_filenames": [ "AccessEnum.exe" ], "primary": "AccessEnum.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/accessenum.exe/" }, { "name": "addinprocess.exe", "category": "windows", "original_filenames": [ "AddInProcess.exe" ], "primary": "AddInProcess.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/addinprocess.exe/" }, { "name": "addinprocess32.exe", "category": "windows", "original_filenames": [ "AddInProcess32.exe" ], "primary": "AddInProcess32.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/addinprocess32.exe/" }, { "name": "addinutil.exe", "category": "lolbin", "original_filenames": [ "AddInUtil.exe" ], "primary": "AddInUtil.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/addinutil.exe/" }, { "name": "adexplorer.exe", "category": "sysinternals", "original_filenames": [ "AdExp" ], "primary": "AdExp", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/adexplorer.exe/" }, { "name": "adexplorer64.exe", "category": "sysinternals", "original_filenames": [ "AdExp" ], "primary": "AdExp", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/adexplorer64.exe/" }, { "name": "adinsight.exe", "category": "sysinternals", "original_filenames": [ "ADInsight" ], "primary": "ADInsight", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/adinsight.exe/" }, { "name": "adinsight64.exe", "category": "sysinternals", "original_filenames": [ "ADInsight" ], "primary": "ADInsight", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/adinsight64.exe/" }, { "name": "adrestore.exe", "category": "sysinternals", "original_filenames": [ "adrestore" ], "primary": "adrestore", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/adrestore.exe/" }, { "name": "adrestore64.exe", "category": "sysinternals", "original_filenames": [ "adrestore" ], "primary": "adrestore", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/adrestore64.exe/" }, { "name": "advpack.dll", "category": "lolbin", "original_filenames": [ "ADVPACK.DLL" ], "primary": "ADVPACK.DLL", "sensor_verified": false, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/advpack.dll/" }, { "name": "agentactivationruntimestarter.exe", "category": "windows", "original_filenames": [ "AgentActivationRuntimeStarter.exe" ], "primary": "AgentActivationRuntimeStarter.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/agentactivationruntimestarter.exe/" }, { "name": "agentservice.exe", "category": "windows", "original_filenames": [ "AgentService.exe" ], "primary": "AgentService.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/agentservice.exe/" }, { "name": "aggregatorhost.exe", "category": "windows", "original_filenames": [ "AggregatorHost.exe" ], "primary": "AggregatorHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/aggregatorhost.exe/" }, { "name": "aitstatic.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/aitstatic.exe/" }, { "name": "alg.exe", "category": "windows", "original_filenames": [ "ALG.exe" ], "primary": "ALG.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/alg.exe/" }, { "name": "amd-smi.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/amd-smi.exe/" }, { "name": "amdlogum.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/amdlogum.exe/" }, { "name": "amdnoisesuppression.exe", "category": "windows", "original_filenames": [ "AMDNoiseSuppression.exe" ], "primary": "AMDNoiseSuppression.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/amdnoisesuppression.exe/" }, { "name": "anydesk.exe", "category": "rmm", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "lolrmm-mismatch", "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/anydesk.exe/" }, { "name": "appcmd.exe", "category": "windows", "original_filenames": [ "appcmd.exe" ], "primary": "appcmd.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/appcmd.exe/" }, { "name": "apphostregistrationverifier.exe", "category": "windows", "original_filenames": [ "AppHostNameRegistrationVerifier.exe" ], "primary": "AppHostNameRegistrationVerifier.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/apphostregistrationverifier.exe/" }, { "name": "appidcertstorecheck.exe", "category": "windows", "original_filenames": [ "AppIDCertstoreCheck.exe" ], "primary": "AppIDCertstoreCheck.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/appidcertstorecheck.exe/" }, { "name": "appidpolicyconverter.exe", "category": "windows", "original_filenames": [ "AppIDPolicyConverter.exe" ], "primary": "AppIDPolicyConverter.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/appidpolicyconverter.exe/" }, { "name": "appidtel.exe", "category": "windows", "original_filenames": [ "APPIDTEL.EXE" ], "primary": "APPIDTEL.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/appidtel.exe/" }, { "name": "appinstallerbackgroundupdate.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/appinstallerbackgroundupdate.exe/" }, { "name": "applaunch.exe", "category": "lolbin", "original_filenames": [ "applaunch.exe" ], "primary": "applaunch.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/applaunch.exe/" }, { "name": "applicationframehost.exe", "category": "windows", "original_filenames": [ "ApplicationFrameHost.exe" ], "primary": "ApplicationFrameHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/applicationframehost.exe/" }, { "name": "applysettingstemplatecatalog.exe", "category": "windows", "original_filenames": [ "ApplySettingsTemplateCatalog.exe" ], "primary": "ApplySettingsTemplateCatalog.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/applysettingstemplatecatalog.exe/" }, { "name": "applytrustoffline.exe", "category": "windows", "original_filenames": [ "\"ApplyTrustOffline.PROGRAM\"" ], "primary": "\"ApplyTrustOffline.PROGRAM\"", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/applytrustoffline.exe/" }, { "name": "approvechildrequest.exe", "category": "windows", "original_filenames": [ "ApproveChildRequest.exe" ], "primary": "ApproveChildRequest.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/approvechildrequest.exe/" }, { "name": "appvclient.exe", "category": "windows", "original_filenames": [ "AppVClient.exe" ], "primary": "AppVClient.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/appvclient.exe/" }, { "name": "appvdllsurrogate.exe", "category": "windows", "original_filenames": [ "AppVDllSurrogate.exe" ], "primary": "AppVDllSurrogate.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/appvdllsurrogate.exe/" }, { "name": "appvnice.exe", "category": "windows", "original_filenames": [ "appvnice.exe" ], "primary": "appvnice.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/appvnice.exe/" }, { "name": "appvshnotify.exe", "category": "windows", "original_filenames": [ "AppVShNotify.exe" ], "primary": "AppVShNotify.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/appvshnotify.exe/" }, { "name": "appvstreamingux.exe", "category": "windows", "original_filenames": [ "AppVStreamingUX.exe" ], "primary": "AppVStreamingUX.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/appvstreamingux.exe/" }, { "name": "arp.exe", "category": "windows", "original_filenames": [ "arp.exe" ], "primary": "arp.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/arp.exe/" }, { "name": "aspnet_compiler.exe", "category": "lolbin", "original_filenames": [ "aspnet_compiler.exe" ], "primary": "aspnet_compiler.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/aspnet_compiler.exe/" }, { "name": "aspnet_regbrowsers.exe", "category": "windows", "original_filenames": [ "aspnet_regbrowsers.exe" ], "primary": "aspnet_regbrowsers.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/aspnet_regbrowsers.exe/" }, { "name": "aspnet_regiis.exe", "category": "windows", "original_filenames": [ "aspnet_regiis.exe" ], "primary": "aspnet_regiis.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/aspnet_regiis.exe/" }, { "name": "aspnet_regsql.exe", "category": "windows", "original_filenames": [ "aspnet_regsql.exe" ], "primary": "aspnet_regsql.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/aspnet_regsql.exe/" }, { "name": "aspnet_state.exe", "category": "windows", "original_filenames": [ "aspnet_state.exe" ], "primary": "aspnet_state.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/aspnet_state.exe/" }, { "name": "aspnet_wp.exe", "category": "windows", "original_filenames": [ "aspnet_wp.exe" ], "primary": "aspnet_wp.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/aspnet_wp.exe/" }, { "name": "assignedaccessguard.exe", "category": "windows", "original_filenames": [ "AssignedAccessGuard.exe" ], "primary": "AssignedAccessGuard.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/assignedaccessguard.exe/" }, { "name": "at.exe", "category": "lolbin", "original_filenames": [ "AT.EXE" ], "primary": "AT.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/at.exe/" }, { "name": "atbroker.exe", "category": "lolbin", "original_filenames": [ "ATBroker.exe" ], "primary": "ATBroker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/atbroker.exe/" }, { "name": "atieah32.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/atieah32.exe/" }, { "name": "atieah64.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/atieah64.exe/" }, { "name": "atieclxx.exe", "category": "windows", "original_filenames": [ "ATIECLXX.EXE" ], "primary": "ATIECLXX.EXE", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/atieclxx.exe/" }, { "name": "attrib.exe", "category": "windows", "original_filenames": [ "ATTRIB.EXE" ], "primary": "ATTRIB.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/attrib.exe/" }, { "name": "audiodg.exe", "category": "windows", "original_filenames": [ "audioadg.exe" ], "primary": "audioadg.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/audiodg.exe/" }, { "name": "audit.exe", "category": "windows", "original_filenames": [ "AUDIT.EXE" ], "primary": "AUDIT.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/audit.exe/" }, { "name": "auditpol.exe", "category": "windows", "original_filenames": [ "AUDITPOL.EXE" ], "primary": "AUDITPOL.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/auditpol.exe/" }, { "name": "auditshd.exe", "category": "windows", "original_filenames": [ "AuditShD.exe" ], "primary": "AuditShD.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/auditshd.exe/" }, { "name": "authhost.exe", "category": "windows", "original_filenames": [ "AuthHost.exe" ], "primary": "AuthHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/authhost.exe/" }, { "name": "autocathost.exe", "category": "windows", "original_filenames": [ "AutoCatHost.exe" ], "primary": "AutoCatHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/autocathost.exe/" }, { "name": "autochk.exe", "category": "windows", "original_filenames": [ "AutoChk.Exe" ], "primary": "AutoChk.Exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/autochk.exe/" }, { "name": "autofstx.exe", "category": "windows", "original_filenames": [ "AutoFsTx.Exe" ], "primary": "AutoFsTx.Exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/autofstx.exe/" }, { "name": "autologon.exe", "category": "sysinternals", "original_filenames": [ "Autolog.exe" ], "primary": "Autolog.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/autologon.exe/" }, { "name": "autologon64.exe", "category": "sysinternals", "original_filenames": [ "Autolog.exe" ], "primary": "Autolog.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/autologon64.exe/" }, { "name": "autoruns.exe", "category": "sysinternals", "original_filenames": [ "autoruns.exe" ], "primary": "autoruns.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/autoruns.exe/" }, { "name": "autoruns64.exe", "category": "sysinternals", "original_filenames": [ "autoruns.exe" ], "primary": "autoruns.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/autoruns64.exe/" }, { "name": "autorunsc.exe", "category": "sysinternals", "original_filenames": [ "autoruns.exe" ], "primary": "autoruns.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/autorunsc.exe/" }, { "name": "autorunsc64.exe", "category": "sysinternals", "original_filenames": [ "autoruns.exe" ], "primary": "autoruns.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/autorunsc64.exe/" }, { "name": "axinstui.exe", "category": "windows", "original_filenames": [ "AxInstUI.exe" ], "primary": "AxInstUI.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/axinstui.exe/" }, { "name": "baaupdate.exe", "category": "windows", "original_filenames": [ "BAAUPDATE.EXE" ], "primary": "BAAUPDATE.EXE", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/baaupdate.exe/" }, { "name": "backgroundtaskhost.exe", "category": "windows", "original_filenames": [ "backgroundTaskHost.exe" ], "primary": "backgroundTaskHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/backgroundtaskhost.exe/" }, { "name": "backgroundtransferhost.exe", "category": "windows", "original_filenames": [ "BackgroundTransferHost.exe" ], "primary": "BackgroundTransferHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/backgroundtransferhost.exe/" }, { "name": "bash.exe", "category": "lolbin", "original_filenames": [ "Bash.exe" ], "primary": "Bash.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bash.exe/" }, { "name": "bcdboot.exe", "category": "windows", "original_filenames": [ "bcdboot.exe" ], "primary": "bcdboot.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bcdboot.exe/" }, { "name": "bcdedit.exe", "category": "windows", "original_filenames": [ "bcdedit.exe" ], "primary": "bcdedit.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bcdedit.exe/" }, { "name": "bdechangepin.exe", "category": "windows", "original_filenames": [ "bdechangepin.exe" ], "primary": "bdechangepin.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bdechangepin.exe/" }, { "name": "bdehdcfg.exe", "category": "windows", "original_filenames": [ "BdeHdCfg.exe" ], "primary": "BdeHdCfg.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bdehdcfg.exe/" }, { "name": "bdeuisrv.exe", "category": "windows", "original_filenames": [ "BDEUISRV.DLL" ], "primary": "BDEUISRV.DLL", "sensor_verified": true, "flags": [ "differs-from-name", "dll-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bdeuisrv.exe/" }, { "name": "bdeunlock.exe", "category": "windows", "original_filenames": [ "BDEUNLOCK.EXE" ], "primary": "BDEUNLOCK.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bdeunlock.exe/" }, { "name": "bfscfg.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bfscfg.exe/" }, { "name": "bfsvc.exe", "category": "windows", "original_filenames": [ "bfsvc.exe" ], "primary": "bfsvc.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bfsvc.exe/" }, { "name": "bginfo.exe", "category": "lolbin", "original_filenames": [ "BGInfo.exe" ], "primary": "BGInfo.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bginfo.exe/" }, { "name": "bginfo64.exe", "category": "sysinternals", "original_filenames": [ "BGInfo.exe" ], "primary": "BGInfo.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bginfo64.exe/" }, { "name": "bioiso.exe", "category": "windows", "original_filenames": [ "BioIso.exe" ], "primary": "BioIso.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bioiso.exe/" }, { "name": "bitlockerdeviceencryption.exe", "category": "windows", "original_filenames": [ "BitLockerDeviceEncryption.exe" ], "primary": "BitLockerDeviceEncryption.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bitlockerdeviceencryption.exe/" }, { "name": "bitlockerwizard.exe", "category": "windows", "original_filenames": [ "BitLockerWizard.exe" ], "primary": "BitLockerWizard.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bitlockerwizard.exe/" }, { "name": "bitlockerwizardelev.exe", "category": "windows", "original_filenames": [ "BitLockerWizardElev.exe" ], "primary": "BitLockerWizardElev.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bitlockerwizardelev.exe/" }, { "name": "bitsadmin.exe", "category": "lolbin", "original_filenames": [ "bitsadmin.exe" ], "primary": "bitsadmin.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bitsadmin.exe/" }, { "name": "bootim.exe", "category": "windows", "original_filenames": [ "bootim.exe" ], "primary": "bootim.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bootim.exe/" }, { "name": "bootsect.exe", "category": "windows", "original_filenames": [ "bootsect.exe" ], "primary": "bootsect.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bootsect.exe/" }, { "name": "bridgeunattend.exe", "category": "windows", "original_filenames": [ "bridgeunattend.exe" ], "primary": "bridgeunattend.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bridgeunattend.exe/" }, { "name": "browser_broker.exe", "category": "windows", "original_filenames": [ "browser_broker.EXE" ], "primary": "browser_broker.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/browser_broker.exe/" }, { "name": "browsercore.exe", "category": "windows", "original_filenames": [ "BrowserCore.exe" ], "primary": "BrowserCore.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/browsercore.exe/" }, { "name": "browserexport.exe", "category": "windows", "original_filenames": [ "browserexport.exe" ], "primary": "browserexport.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/browserexport.exe/" }, { "name": "bthudtask.exe", "category": "windows", "original_filenames": [ "BthUdTask.exe" ], "primary": "BthUdTask.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bthudtask.exe/" }, { "name": "bytecodegenerator.exe", "category": "windows", "original_filenames": [ "BytecodeGenerator.exe" ], "primary": "BytecodeGenerator.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/bytecodegenerator.exe/" }, { "name": "cacheset.exe", "category": "sysinternals", "original_filenames": [ "Cacheset" ], "primary": "Cacheset", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cacheset.exe/" }, { "name": "cacheset64.exe", "category": "sysinternals", "original_filenames": [ "Cacheset" ], "primary": "Cacheset", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cacheset64.exe/" }, { "name": "cacls.exe", "category": "windows", "original_filenames": [ "CACLS.EXE" ], "primary": "CACLS.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cacls.exe/" }, { "name": "calc.exe", "category": "windows", "original_filenames": [ "CALC.EXE" ], "primary": "CALC.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/calc.exe/" }, { "name": "camerasettingsuihost.exe", "category": "windows", "original_filenames": [ "CameraSettingsUIHost.exe" ], "primary": "CameraSettingsUIHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/camerasettingsuihost.exe/" }, { "name": "caspol.exe", "category": "windows", "original_filenames": [ "caspol.exe" ], "primary": "caspol.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/caspol.exe/" }, { "name": "castsrv.exe", "category": "windows", "original_filenames": [ "CastSrv.exe" ], "primary": "CastSrv.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/castsrv.exe/" }, { "name": "ccg.exe", "category": "windows", "original_filenames": [ "CCG.exe" ], "primary": "CCG.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ccg.exe/" }, { "name": "certenrollctrl.exe", "category": "windows", "original_filenames": [ "EnrollComServer.exe" ], "primary": "EnrollComServer.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/certenrollctrl.exe/" }, { "name": "certoc.exe", "category": "lolbin", "original_filenames": [ "CertOC.exe" ], "primary": "CertOC.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/certoc.exe/" }, { "name": "certreq.exe", "category": "lolbin", "original_filenames": [ "CertReq.exe" ], "primary": "CertReq.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/certreq.exe/" }, { "name": "certutil.exe", "category": "lolbin", "original_filenames": [ "CertUtil.exe" ], "primary": "CertUtil.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/certutil.exe/" }, { "name": "cexecsvc.exe", "category": "windows", "original_filenames": [ "CExecSvc.exe" ], "primary": "CExecSvc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cexecsvc.exe/" }, { "name": "change.exe", "category": "lolbin", "original_filenames": [ "change.exe" ], "primary": "change.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/change.exe/" }, { "name": "changepk.exe", "category": "windows", "original_filenames": [ "changepk.exe", "changepkey.exe" ], "primary": "changepk.exe", "sensor_verified": true, "flags": [ "drift" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/changepk.exe/" }, { "name": "charmap.exe", "category": "windows", "original_filenames": [ "charmap.exe" ], "primary": "charmap.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/charmap.exe/" }, { "name": "chcp.com", "category": "windows", "original_filenames": [ "CHCP.COM" ], "primary": "CHCP.COM", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/chcp.com/" }, { "name": "checknetisolation.exe", "category": "windows", "original_filenames": [ "CheckNetIsolation.exe" ], "primary": "CheckNetIsolation.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/checknetisolation.exe/" }, { "name": "chglogon.exe", "category": "windows", "original_filenames": [ "chglogon.exe" ], "primary": "chglogon.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/chglogon.exe/" }, { "name": "chgport.exe", "category": "windows", "original_filenames": [ "chgport.exe" ], "primary": "chgport.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/chgport.exe/" }, { "name": "chgusr.exe", "category": "windows", "original_filenames": [ "chgusr.exe" ], "primary": "chgusr.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/chgusr.exe/" }, { "name": "chkdsk.exe", "category": "windows", "original_filenames": [ "CHKDSK.EXE" ], "primary": "CHKDSK.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/chkdsk.exe/" }, { "name": "chkntfs.exe", "category": "windows", "original_filenames": [ "CHKNTFS.EXE" ], "primary": "CHKNTFS.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/chkntfs.exe/" }, { "name": "choice.exe", "category": "windows", "original_filenames": [ "choice.exe" ], "primary": "choice.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/choice.exe/" }, { "name": "chsime.exe", "category": "windows", "original_filenames": [ "ChsIME.exe" ], "primary": "ChsIME.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/chsime.exe/" }, { "name": "chtime.exe", "category": "windows", "original_filenames": [ "ChtIME.exe" ], "primary": "ChtIME.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/chtime.exe/" }, { "name": "cidiag.exe", "category": "windows", "original_filenames": [ "CIDiag.exe" ], "primary": "CIDiag.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cidiag.exe/" }, { "name": "cipher.exe", "category": "lolbin", "original_filenames": [ "CIPHER.EXE" ], "primary": "CIPHER.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cipher.exe/" }, { "name": "citool.exe", "category": "windows", "original_filenames": [ "CiTool.exe" ], "primary": "CiTool.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/citool.exe/" }, { "name": "cleanmgr.exe", "category": "windows", "original_filenames": [ "CLEANMGR.DLL" ], "primary": "CLEANMGR.DLL", "sensor_verified": true, "flags": [ "differs-from-name", "dll-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cleanmgr.exe/" }, { "name": "cliconfg.exe", "category": "windows", "original_filenames": [ "cliconfg.exe" ], "primary": "cliconfg.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cliconfg.exe/" }, { "name": "clinfo.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/clinfo.exe/" }, { "name": "clip.exe", "category": "windows", "original_filenames": [ "clip.exe" ], "primary": "clip.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/clip.exe/" }, { "name": "clipdls.exe", "category": "windows", "original_filenames": [ "ClipDLS.exe" ], "primary": "ClipDLS.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/clipdls.exe/" }, { "name": "cliprenew.exe", "category": "windows", "original_filenames": [ "ClipRenew.exe" ], "primary": "ClipRenew.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cliprenew.exe/" }, { "name": "clipup.exe", "category": "windows", "original_filenames": [ "ClipUp.exe" ], "primary": "ClipUp.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/clipup.exe/" }, { "name": "clockres.exe", "category": "sysinternals", "original_filenames": [ "Clockres" ], "primary": "Clockres", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/clockres.exe/" }, { "name": "clockres64.exe", "category": "sysinternals", "original_filenames": [ "Clockres" ], "primary": "Clockres", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/clockres64.exe/" }, { "name": "cloudexperiencehostbroker.exe", "category": "windows", "original_filenames": [ "CloudExperienceHostBroker.exe" ], "primary": "CloudExperienceHostBroker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cloudexperiencehostbroker.exe/" }, { "name": "cloudnotifications.exe", "category": "windows", "original_filenames": [ "CloudNotifications.exe" ], "primary": "CloudNotifications.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cloudnotifications.exe/" }, { "name": "clussvc.exe", "category": "windows", "original_filenames": [ "clussvc" ], "primary": "clussvc", "sensor_verified": false, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/clussvc.exe/" }, { "name": "cmd.exe", "category": "lolbin", "original_filenames": [ "Cmd.Exe" ], "primary": "Cmd.Exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cmd.exe/" }, { "name": "cmdiag.exe", "category": "windows", "original_filenames": [ "cmdiag.exe" ], "primary": "cmdiag.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cmdiag.exe/" }, { "name": "cmdkey.exe", "category": "lolbin", "original_filenames": [ "cmdkey.exe" ], "primary": "cmdkey.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cmdkey.exe/" }, { "name": "cmdl32.exe", "category": "lolbin", "original_filenames": [ "CMDL32.EXE" ], "primary": "CMDL32.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cmdl32.exe/" }, { "name": "cmimageworker.exe", "category": "windows", "original_filenames": [ "cmimageworker.exe" ], "primary": "cmimageworker.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cmimageworker.exe/" }, { "name": "cmmon32.exe", "category": "windows", "original_filenames": [ "CMMON32.exe" ], "primary": "CMMON32.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cmmon32.exe/" }, { "name": "cmproxyd.exe", "category": "windows", "original_filenames": [ "cmproxyd.exe" ], "primary": "cmproxyd.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cmproxyd.exe/" }, { "name": "cmstp.exe", "category": "lolbin", "original_filenames": [ "CMSTP.EXE" ], "primary": "CMSTP.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cmstp.exe/" }, { "name": "cofire.exe", "category": "windows", "original_filenames": [ "cofire.exe" ], "primary": "cofire.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cofire.exe/" }, { "name": "colorcpl.exe", "category": "lolbin", "original_filenames": [ "colorcpl.exe" ], "primary": "colorcpl.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/colorcpl.exe/" }, { "name": "comp.exe", "category": "windows", "original_filenames": [ "Comp.Exe" ], "primary": "Comp.Exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/comp.exe/" }, { "name": "compact.exe", "category": "windows", "original_filenames": [ "COMPACT.EXE" ], "primary": "COMPACT.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/compact.exe/" }, { "name": "compattelrunner.exe", "category": "windows", "original_filenames": [ "CompatTelRunner.exe" ], "primary": "CompatTelRunner.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/compattelrunner.exe/" }, { "name": "compmgmtlauncher.exe", "category": "windows", "original_filenames": [ "CompMgmtLauncher.exe" ], "primary": "CompMgmtLauncher.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/compmgmtlauncher.exe/" }, { "name": "comppkgsrv.exe", "category": "windows", "original_filenames": [ "CompPkgSrv.exe" ], "primary": "CompPkgSrv.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/comppkgsrv.exe/" }, { "name": "computerdefaults.exe", "category": "lolbin", "original_filenames": [ "ComputerDefaults.EXE" ], "primary": "ComputerDefaults.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/computerdefaults.exe/" }, { "name": "comrepl.exe", "category": "windows", "original_filenames": [ "COMREPL.EXE" ], "primary": "COMREPL.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/comrepl.exe/" }, { "name": "comsvcconfig.exe", "category": "windows", "original_filenames": [ "ComSvcConfig.exe" ], "primary": "ComSvcConfig.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/comsvcconfig.exe/" }, { "name": "comsvcs.dll", "category": "lolbin", "original_filenames": [ "COMSVCS.DLL" ], "primary": "COMSVCS.DLL", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/comsvcs.dll/" }, { "name": "configsecuritypolicy.exe", "category": "lolbin", "original_filenames": [ "ConfigSecurityPolicy.exe", "ConfiguSecurityPolicy.exe" ], "primary": "ConfigSecurityPolicy.exe", "sensor_verified": true, "flags": [ "drift" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/configsecuritypolicy.exe/" }, { "name": "conhost.exe", "category": "lolbin", "original_filenames": [ "CONHOST.EXE" ], "primary": "CONHOST.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/conhost.exe/" }, { "name": "consent.exe", "category": "windows", "original_filenames": [ "consent.exe" ], "primary": "consent.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/consent.exe/" }, { "name": "contig.exe", "category": "sysinternals", "original_filenames": [ "Contig.exe" ], "primary": "Contig.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/contig.exe/" }, { "name": "contig64.exe", "category": "sysinternals", "original_filenames": [ "Contig.exe" ], "primary": "Contig.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/contig64.exe/" }, { "name": "control.exe", "category": "lolbin", "original_filenames": [ "CONTROL.EXE" ], "primary": "CONTROL.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/control.exe/" }, { "name": "convert.exe", "category": "windows", "original_filenames": [ "CONVERT.EXE" ], "primary": "CONVERT.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/convert.exe/" }, { "name": "convertvhd.exe", "category": "windows", "original_filenames": [ "ConvertVhd.exe" ], "primary": "ConvertVhd.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/convertvhd.exe/" }, { "name": "copilot_setup.exe", "category": "windows", "original_filenames": [ "copilot_setup.exe" ], "primary": "copilot_setup.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/copilot_setup.exe/" }, { "name": "copilotapp.exe", "category": "windows", "original_filenames": [ "copilotapp.exe" ], "primary": "copilotapp.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/copilotapp.exe/" }, { "name": "copilotapphost.exe", "category": "windows", "original_filenames": [ "copilotapphost.dll" ], "primary": "copilotapphost.dll", "sensor_verified": false, "flags": [ "differs-from-name", "dll-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/copilotapphost.exe/" }, { "name": "coredpussvr.exe", "category": "windows", "original_filenames": [ "coredpussvr.exe" ], "primary": "coredpussvr.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/coredpussvr.exe/" }, { "name": "coreinfo.exe", "category": "sysinternals", "original_filenames": [ "coreinfo" ], "primary": "coreinfo", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/coreinfo.exe/" }, { "name": "coreinfo64.exe", "category": "sysinternals", "original_filenames": [ "coreinfo" ], "primary": "coreinfo", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/coreinfo64.exe/" }, { "name": "coreinfoex.exe", "category": "sysinternals", "original_filenames": [ "coreinfo" ], "primary": "coreinfo", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/coreinfoex.exe/" }, { "name": "coreinfoex64.exe", "category": "sysinternals", "original_filenames": [ "coreinfo" ], "primary": "coreinfo", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/coreinfoex64.exe/" }, { "name": "cpustres.exe", "category": "sysinternals", "original_filenames": [ "CPUSTRES" ], "primary": "CPUSTRES", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cpustres.exe/" }, { "name": "cpustres64.exe", "category": "sysinternals", "original_filenames": [ "CPUSTRES" ], "primary": "CPUSTRES", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cpustres64.exe/" }, { "name": "credentialenrollmentmanager.exe", "category": "windows", "original_filenames": [ "CredentialEnrollmentManager.exe" ], "primary": "CredentialEnrollmentManager.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/credentialenrollmentmanager.exe/" }, { "name": "credentialuibroker.exe", "category": "windows", "original_filenames": [ "CredentialUIBroker.exe" ], "primary": "CredentialUIBroker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/credentialuibroker.exe/" }, { "name": "credwiz.exe", "category": "windows", "original_filenames": [ "credwiz.exe" ], "primary": "credwiz.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/credwiz.exe/" }, { "name": "csc.exe", "category": "lolbin", "original_filenames": [ "csc.exe" ], "primary": "csc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/csc.exe/" }, { "name": "cscript.exe", "category": "lolbin", "original_filenames": [ "cscript.exe" ], "primary": "cscript.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cscript.exe/" }, { "name": "csrss.exe", "category": "windows", "original_filenames": [ "CSRSS.Exe" ], "primary": "CSRSS.Exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/csrss.exe/" }, { "name": "csvde.exe", "category": "windows", "original_filenames": [ "csvde.exe" ], "primary": "csvde.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/csvde.exe/" }, { "name": "ctacworker.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ctacworker.exe/" }, { "name": "ctfmon.exe", "category": "windows", "original_filenames": [ "CTFMON.EXE" ], "primary": "CTFMON.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ctfmon.exe/" }, { "name": "ctrl2cap.exe", "category": "sysinternals", "original_filenames": [ "ctrl2cap.exe" ], "primary": "ctrl2cap.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ctrl2cap.exe/" }, { "name": "cttune.exe", "category": "windows", "original_filenames": [ "CTTUNE.EXE" ], "primary": "CTTUNE.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cttune.exe/" }, { "name": "cttunesvr.exe", "category": "windows", "original_filenames": [ "CTTUNESVR.EXE" ], "primary": "CTTUNESVR.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cttunesvr.exe/" }, { "name": "curl.exe", "category": "windows", "original_filenames": [ "curl.exe" ], "primary": "curl.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/curl.exe/" }, { "name": "custominstallexec.exe", "category": "windows", "original_filenames": [ "CUSTOMINSTALLEXEC.EXE" ], "primary": "CUSTOMINSTALLEXEC.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/custominstallexec.exe/" }, { "name": "customshellhost.exe", "category": "lolbin", "original_filenames": [ "CustomShellHost.exe" ], "primary": "CustomShellHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/customshellhost.exe/" }, { "name": "cvtres.exe", "category": "windows", "original_filenames": [ "CVTRES.EXE" ], "primary": "CVTRES.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/cvtres.exe/" }, { "name": "dashost.exe", "category": "windows", "original_filenames": [ "dasHost.exe" ], "primary": "dasHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dashost.exe/" }, { "name": "dataexchangehost.exe", "category": "windows", "original_filenames": [ "DataExchangeHost.exe" ], "primary": "DataExchangeHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dataexchangehost.exe/" }, { "name": "datastorecachedumptool.exe", "category": "windows", "original_filenames": [ "DataStoreCacheDumpTool.exe" ], "primary": "DataStoreCacheDumpTool.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/datastorecachedumptool.exe/" }, { "name": "datasvcutil.exe", "category": "lolbin", "original_filenames": [ "DataSvcUtil.exe" ], "primary": "DataSvcUtil.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/datasvcutil.exe/" }, { "name": "dbgview.exe", "category": "sysinternals", "original_filenames": [ "Dbgview.exe" ], "primary": "Dbgview.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dbgview.exe/" }, { "name": "dbgview64.exe", "category": "sysinternals", "original_filenames": [ "Dbgview.exe" ], "primary": "Dbgview.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dbgview64.exe/" }, { "name": "dbgviewcli.exe", "category": "sysinternals", "original_filenames": [ "dbgviewcli.exe" ], "primary": "dbgviewcli.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dbgviewcli.exe/" }, { "name": "dbgviewcli64.exe", "category": "sysinternals", "original_filenames": [ "dbgviewcli.exe" ], "primary": "dbgviewcli.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dbgviewcli64.exe/" }, { "name": "dbinstaller.exe", "category": "windows", "original_filenames": [ "dbInstaller.exe" ], "primary": "dbInstaller.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dbinstaller.exe/" }, { "name": "dccw.exe", "category": "windows", "original_filenames": [ "dccw.exe" ], "primary": "dccw.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dccw.exe/" }, { "name": "dcomcnfg.exe", "category": "windows", "original_filenames": [ "DCOMCNFG.EXE" ], "primary": "DCOMCNFG.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dcomcnfg.exe/" }, { "name": "ddodiag.exe", "category": "windows", "original_filenames": [ "DDODiag.exe" ], "primary": "DDODiag.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ddodiag.exe/" }, { "name": "defrag.exe", "category": "windows", "original_filenames": [ "Defrag.EXE" ], "primary": "Defrag.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/defrag.exe/" }, { "name": "deploymentcsphelper.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/deploymentcsphelper.exe/" }, { "name": "desk.cpl", "category": "lolbin", "original_filenames": [ "DESK.CPL" ], "primary": "DESK.CPL", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/desk.cpl/" }, { "name": "desktopimgdownldr.exe", "category": "lolbin", "original_filenames": [ "desktopimgdownldr.exe" ], "primary": "desktopimgdownldr.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/desktopimgdownldr.exe/" }, { "name": "desktops.exe", "category": "sysinternals", "original_filenames": [ "Desktops" ], "primary": "Desktops", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/desktops.exe/" }, { "name": "desktops64.exe", "category": "sysinternals", "original_filenames": [ "Desktops" ], "primary": "Desktops", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/desktops64.exe/" }, { "name": "devicecensus.exe", "category": "windows", "original_filenames": [ "DeviceCensus.exe" ], "primary": "DeviceCensus.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/devicecensus.exe/" }, { "name": "devicecredentialdeployment.exe", "category": "lolbin", "original_filenames": [ "\"DeviceCredentialDeployment.exe\"" ], "primary": "\"DeviceCredentialDeployment.exe\"", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/devicecredentialdeployment.exe/" }, { "name": "deviceeject.exe", "category": "windows", "original_filenames": [ "DeviceEject.EXE" ], "primary": "DeviceEject.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/deviceeject.exe/" }, { "name": "deviceenroller.exe", "category": "windows", "original_filenames": [ "deviceenroller.exe" ], "primary": "deviceenroller.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/deviceenroller.exe/" }, { "name": "devicepairingwizard.exe", "category": "windows", "original_filenames": [ "DevicePairing.exe" ], "primary": "DevicePairing.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/devicepairingwizard.exe/" }, { "name": "deviceproperties.exe", "category": "windows", "original_filenames": [ "DeviceProperties.exe" ], "primary": "DeviceProperties.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/deviceproperties.exe/" }, { "name": "devtoolslauncher.exe", "category": "lolbin", "original_filenames": [ "DevToolsLauncher.exe" ], "primary": "DevToolsLauncher.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/devtoolslauncher.exe/" }, { "name": "dfdwiz.exe", "category": "windows", "original_filenames": [ "DFDWiz.exe" ], "primary": "DFDWiz.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dfdwiz.exe/" }, { "name": "dfrgui.exe", "category": "windows", "original_filenames": [ "lhdfrgui.exe" ], "primary": "lhdfrgui.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dfrgui.exe/" }, { "name": "dfshim.dll", "category": "lolbin", "original_filenames": [ "dfshim.dll" ], "primary": "dfshim.dll", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dfshim.dll/" }, { "name": "dfsvc.exe", "category": "lolbin", "original_filenames": [ "dfsvc.exe" ], "primary": "dfsvc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dfsvc.exe/" }, { "name": "dgtrayicon.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dgtrayicon.exe/" }, { "name": "dialer.exe", "category": "windows", "original_filenames": [ "DIALER.EXE" ], "primary": "DIALER.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dialer.exe/" }, { "name": "directxdatabaseupdater.exe", "category": "windows", "original_filenames": [ "DirectXDatabaseUpdater.exe" ], "primary": "DirectXDatabaseUpdater.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/directxdatabaseupdater.exe/" }, { "name": "disk2vhd.exe", "category": "sysinternals", "original_filenames": [ "Disk2vhd" ], "primary": "Disk2vhd", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/disk2vhd.exe/" }, { "name": "disk2vhd64.exe", "category": "sysinternals", "original_filenames": [ "Disk2vhd" ], "primary": "Disk2vhd", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/disk2vhd64.exe/" }, { "name": "diskext.exe", "category": "sysinternals", "original_filenames": [ "diskext.exe" ], "primary": "diskext.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/diskext.exe/" }, { "name": "diskext64.exe", "category": "sysinternals", "original_filenames": [ "diskext.exe" ], "primary": "diskext.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/diskext64.exe/" }, { "name": "diskmon.exe", "category": "sysinternals", "original_filenames": [ "Diskmon.exe" ], "primary": "Diskmon.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/diskmon.exe/" }, { "name": "diskmon64.exe", "category": "sysinternals", "original_filenames": [ "Diskmon.exe" ], "primary": "Diskmon.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/diskmon64.exe/" }, { "name": "diskpart.exe", "category": "windows", "original_filenames": [ "diskpart.exe" ], "primary": "diskpart.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/diskpart.exe/" }, { "name": "diskperf.exe", "category": "windows", "original_filenames": [ "DISKPERF.EXE" ], "primary": "DISKPERF.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/diskperf.exe/" }, { "name": "diskraid.exe", "category": "windows", "original_filenames": [ "diskraid.exe" ], "primary": "diskraid.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/diskraid.exe/" }, { "name": "diskshadow.exe", "category": "lolbin", "original_filenames": [ "diskshadow.exe" ], "primary": "diskshadow.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/diskshadow.exe/" }, { "name": "disksnapshot.exe", "category": "windows", "original_filenames": [ "DiskSnapshot.exe" ], "primary": "DiskSnapshot.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/disksnapshot.exe/" }, { "name": "diskusage.exe", "category": "windows", "original_filenames": [ "diskusage.exe" ], "primary": "diskusage.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/diskusage.exe/" }, { "name": "diskview.exe", "category": "sysinternals", "original_filenames": [ "DiskView" ], "primary": "DiskView", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/diskview.exe/" }, { "name": "diskview64.exe", "category": "sysinternals", "original_filenames": [ "DiskView" ], "primary": "DiskView", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/diskview64.exe/" }, { "name": "dism.exe", "category": "windows", "original_filenames": [ "DISM.EXE" ], "primary": "DISM.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dism.exe/" }, { "name": "dismhost.exe", "category": "windows", "original_filenames": [ "DismHost.exe" ], "primary": "DismHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dismhost.exe/" }, { "name": "dispdiag.exe", "category": "windows", "original_filenames": [ "dispdiag.exe" ], "primary": "dispdiag.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dispdiag.exe/" }, { "name": "displayswitch.exe", "category": "windows", "original_filenames": [ "DisplaySwitch.exe" ], "primary": "DisplaySwitch.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/displayswitch.exe/" }, { "name": "djoin.exe", "category": "windows", "original_filenames": [ "djoin.exe" ], "primary": "djoin.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/djoin.exe/" }, { "name": "dllhost.exe", "category": "windows", "original_filenames": [ "dllhost.exe" ], "primary": "dllhost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dllhost.exe/" }, { "name": "dllhst3g.exe", "category": "windows", "original_filenames": [ "dllhst3g.exe" ], "primary": "dllhst3g.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dllhst3g.exe/" }, { "name": "dmcertinst.exe", "category": "windows", "original_filenames": [ "dmcertinst.exe" ], "primary": "dmcertinst.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dmcertinst.exe/" }, { "name": "dmcfghost.exe", "category": "windows", "original_filenames": [ "dmcfghost.exe" ], "primary": "dmcfghost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dmcfghost.exe/" }, { "name": "dmclient.exe", "category": "windows", "original_filenames": [ "dmclient.exe" ], "primary": "dmclient.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dmclient.exe/" }, { "name": "dmnotificationbroker.exe", "category": "windows", "original_filenames": [ "DmNotificationBroker.exe" ], "primary": "DmNotificationBroker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dmnotificationbroker.exe/" }, { "name": "dmomacpmo.exe", "category": "windows", "original_filenames": [ "DmOmaCpMo.exe" ], "primary": "DmOmaCpMo.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dmomacpmo.exe/" }, { "name": "dns.exe", "category": "windows", "original_filenames": [ "dns.exe" ], "primary": "dns.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dns.exe/" }, { "name": "dnscacheugc.exe", "category": "windows", "original_filenames": [ "dnscacheugc.exe" ], "primary": "dnscacheugc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dnscacheugc.exe/" }, { "name": "dnscmd.exe", "category": "lolbin", "original_filenames": [ "dnscmd.exe" ], "primary": "dnscmd.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dnscmd.exe/" }, { "name": "doskey.exe", "category": "windows", "original_filenames": [ "DOSKEY.EXE" ], "primary": "DOSKEY.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/doskey.exe/" }, { "name": "dotnet.exe", "category": "lolbin", "original_filenames": [ ".NET Host" ], "primary": ".NET Host", "sensor_verified": false, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dotnet.exe/" }, { "name": "dpapimig.exe", "category": "windows", "original_filenames": [ "dpapimig.exe" ], "primary": "dpapimig.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dpapimig.exe/" }, { "name": "dpiscaling.exe", "category": "windows", "original_filenames": [ "DPISCALING.EXE" ], "primary": "DPISCALING.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dpiscaling.exe/" }, { "name": "dplaysvr.exe", "category": "windows", "original_filenames": [ "wcodstub.dll" ], "primary": "wcodstub.dll", "sensor_verified": false, "flags": [ "differs-from-name", "dll-ofn", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dplaysvr.exe/" }, { "name": "dpnsvr.exe", "category": "windows", "original_filenames": [ "wcodstub.dll" ], "primary": "wcodstub.dll", "sensor_verified": false, "flags": [ "differs-from-name", "dll-ofn", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dpnsvr.exe/" }, { "name": "driverquery.exe", "category": "windows", "original_filenames": [ "drvqry.exe" ], "primary": "drvqry.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/driverquery.exe/" }, { "name": "drvinst.exe", "category": "windows", "original_filenames": [ "DrvInst.EXE" ], "primary": "DrvInst.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/drvinst.exe/" }, { "name": "dsac.exe", "category": "windows", "original_filenames": [ "dsac.exe" ], "primary": "dsac.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dsac.exe/" }, { "name": "dsacls.exe", "category": "windows", "original_filenames": [ "DSACLS.EXE" ], "primary": "DSACLS.EXE", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dsacls.exe/" }, { "name": "dsdbutil.exe", "category": "lolbin", "original_filenames": [ "dsDbUtil.exe" ], "primary": "dsDbUtil.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dsdbutil.exe/" }, { "name": "dsget.exe", "category": "windows", "original_filenames": [ "dsget.exe" ], "primary": "dsget.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dsget.exe/" }, { "name": "dsmusertask.exe", "category": "windows", "original_filenames": [ "DsmUserTask.exe" ], "primary": "DsmUserTask.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dsmusertask.exe/" }, { "name": "dsquery.exe", "category": "windows", "original_filenames": [ "dsquery.exe" ], "primary": "dsquery.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dsquery.exe/" }, { "name": "dsregcmd.exe", "category": "windows", "original_filenames": [ "dsregcmd.exe" ], "primary": "dsregcmd.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dsregcmd.exe/" }, { "name": "dstokenclean.exe", "category": "windows", "original_filenames": [ "dstokenclean.exe" ], "primary": "dstokenclean.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dstokenclean.exe/" }, { "name": "dtdump.exe", "category": "windows", "original_filenames": [ "DTDUMP.EXE" ], "primary": "DTDUMP.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dtdump.exe/" }, { "name": "dtrace.exe", "category": "windows", "original_filenames": [ "dtrace.exe" ], "primary": "dtrace.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dtrace.exe/" }, { "name": "du.exe", "category": "sysinternals", "original_filenames": [ "du.exe" ], "primary": "du.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/du.exe/" }, { "name": "du64.exe", "category": "sysinternals", "original_filenames": [ "du.exe" ], "primary": "du.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/du64.exe/" }, { "name": "dump64.exe", "category": "lolbin", "original_filenames": [ "dump64.exe" ], "primary": "dump64.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dump64.exe/" }, { "name": "dusmtask.exe", "category": "windows", "original_filenames": [ "dusmtask.exe" ], "primary": "dusmtask.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dusmtask.exe/" }, { "name": "dvdplay.exe", "category": "windows", "original_filenames": [ "dvdplay" ], "primary": "dvdplay", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dvdplay.exe/" }, { "name": "dwm.exe", "category": "windows", "original_filenames": [ "dwm.exe" ], "primary": "dwm.exe", "sensor_verified": true, "flags": [ "rmm-name-collision" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dwm.exe/" }, { "name": "dwwin.exe", "category": "windows", "original_filenames": [ "DWWIN" ], "primary": "DWWIN", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dwwin.exe/" }, { "name": "dxcap.exe", "category": "lolbin", "original_filenames": [ "DXCap.exe" ], "primary": "DXCap.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dxcap.exe/" }, { "name": "dxdiag.exe", "category": "windows", "original_filenames": [ "dxdiag.exe" ], "primary": "dxdiag.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dxdiag.exe/" }, { "name": "dxgiadaptercache.exe", "category": "windows", "original_filenames": [ "DXGIAdapterCache.exe" ], "primary": "DXGIAdapterCache.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dxgiadaptercache.exe/" }, { "name": "dxpserver.exe", "category": "windows", "original_filenames": [ "DXPServer.EXE" ], "primary": "DXPServer.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/dxpserver.exe/" }, { "name": "eap3host.exe", "category": "windows", "original_filenames": [ "Eap3Host.EXE" ], "primary": "Eap3Host.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/eap3host.exe/" }, { "name": "easeofaccessdialog.exe", "category": "windows", "original_filenames": [ "EaseOfAccessDialog.exe" ], "primary": "EaseOfAccessDialog.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/easeofaccessdialog.exe/" }, { "name": "easinvoker.exe", "category": "windows", "original_filenames": [ "easinvoker.exe" ], "primary": "easinvoker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/easinvoker.exe/" }, { "name": "easpolicymanagerbrokerhost.exe", "category": "windows", "original_filenames": [ "EASPolicyManagerBrokerHost.exe" ], "primary": "EASPolicyManagerBrokerHost.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/easpolicymanagerbrokerhost.exe/" }, { "name": "edit.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/edit.exe/" }, { "name": "edmgen.exe", "category": "windows", "original_filenames": [ "EdmGen.exe" ], "primary": "EdmGen.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/edmgen.exe/" }, { "name": "edpcleanup.exe", "category": "windows", "original_filenames": [ "EDPCleanup.exe" ], "primary": "EDPCleanup.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/edpcleanup.exe/" }, { "name": "edpnotify.exe", "category": "windows", "original_filenames": [ "EdpNotify.exe" ], "primary": "EdpNotify.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/edpnotify.exe/" }, { "name": "eduprintprov.exe", "category": "windows", "original_filenames": [ "eduprintprov.exe" ], "primary": "eduprintprov.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/eduprintprov.exe/" }, { "name": "eeurestart.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/eeurestart.exe/" }, { "name": "efsdump.exe", "category": "sysinternals", "original_filenames": [ "efsdump.exe" ], "primary": "efsdump.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/efsdump.exe/" }, { "name": "efsui.exe", "category": "windows", "original_filenames": [ "efsui.exe" ], "primary": "efsui.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/efsui.exe/" }, { "name": "ehstorauthn.exe", "category": "windows", "original_filenames": [ "EhStorAuthn.exe" ], "primary": "EhStorAuthn.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ehstorauthn.exe/" }, { "name": "elevated_tracing_service.exe", "category": "windows", "original_filenames": [ "elevated_tracing_service.exe" ], "primary": "elevated_tracing_service.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/elevated_tracing_service.exe/" }, { "name": "eoaexperiences.exe", "category": "windows", "original_filenames": [ "EoaExperiences.exe" ], "primary": "EoaExperiences.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/eoaexperiences.exe/" }, { "name": "esentutl.exe", "category": "lolbin", "original_filenames": [ "esentutl.exe" ], "primary": "esentutl.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/esentutl.exe/" }, { "name": "esimtool.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/esimtool.exe/" }, { "name": "eudcedit.exe", "category": "lolbin", "original_filenames": [ "EUDCEDIT.EXE" ], "primary": "EUDCEDIT.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/eudcedit.exe/" }, { "name": "eventcreate.exe", "category": "windows", "original_filenames": [ "evcreate.exe" ], "primary": "evcreate.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/eventcreate.exe/" }, { "name": "eventvwr.exe", "category": "lolbin", "original_filenames": [ "eventvwr.exe" ], "primary": "eventvwr.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/eventvwr.exe/" }, { "name": "expand.exe", "category": "lolbin", "original_filenames": [ "expand" ], "primary": "expand", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/expand.exe/" }, { "name": "explorer.exe", "category": "lolbin", "original_filenames": [ "EXPLORER.EXE" ], "primary": "EXPLORER.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/explorer.exe/" }, { "name": "extexport.exe", "category": "lolbin", "original_filenames": [ "extexport.exe" ], "primary": "extexport.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/extexport.exe/" }, { "name": "extrac32.exe", "category": "lolbin", "original_filenames": [ "extrac32.exe" ], "primary": "extrac32.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/extrac32.exe/" }, { "name": "facefoduninstaller.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/facefoduninstaller.exe/" }, { "name": "fc.exe", "category": "windows", "original_filenames": [ "FC.EXE" ], "primary": "FC.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fc.exe/" }, { "name": "fclip.exe", "category": "windows", "original_filenames": [ "FClip.exe" ], "primary": "FClip.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fclip.exe/" }, { "name": "fhmanagew.exe", "category": "windows", "original_filenames": [ "fhmanagew.exe" ], "primary": "fhmanagew.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fhmanagew.exe/" }, { "name": "filedialogbroker.exe", "category": "windows", "original_filenames": [ "FileDialogBroker.exe" ], "primary": "FileDialogBroker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/filedialogbroker.exe/" }, { "name": "filehistory.exe", "category": "windows", "original_filenames": [ "FileHistory.exe" ], "primary": "FileHistory.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/filehistory.exe/" }, { "name": "find.exe", "category": "windows", "original_filenames": [ "FIND.EXE" ], "primary": "FIND.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/find.exe/" }, { "name": "findlinks.exe", "category": "sysinternals", "original_filenames": [ "findlinks.exe" ], "primary": "findlinks.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/findlinks.exe/" }, { "name": "findlinks64.exe", "category": "sysinternals", "original_filenames": [ "findlinks.exe" ], "primary": "findlinks.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/findlinks64.exe/" }, { "name": "findstr.exe", "category": "lolbin", "original_filenames": [ "FINDSTR.EXE" ], "primary": "FINDSTR.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/findstr.exe/" }, { "name": "finger.exe", "category": "lolbin", "original_filenames": [ "finger.exe" ], "primary": "finger.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/finger.exe/" }, { "name": "firstlogonanim.exe", "category": "windows", "original_filenames": [ "FirstLogonAnim.exe" ], "primary": "FirstLogonAnim.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/firstlogonanim.exe/" }, { "name": "fixmapi.exe", "category": "windows", "original_filenames": [ "FIXMAPI.EXE" ], "primary": "FIXMAPI.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fixmapi.exe/" }, { "name": "fltmc.exe", "category": "lolbin", "original_filenames": [ "fltMC.exe" ], "primary": "fltMC.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fltmc.exe/" }, { "name": "fodhelper.exe", "category": "windows", "original_filenames": [ "FodHelper.EXE" ], "primary": "FodHelper.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fodhelper.exe/" }, { "name": "fondue.exe", "category": "windows", "original_filenames": [ "Fondue.EXE" ], "primary": "Fondue.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fondue.exe/" }, { "name": "fontdrvhost.exe", "category": "windows", "original_filenames": [ "fontdrvhost.exe" ], "primary": "fontdrvhost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fontdrvhost.exe/" }, { "name": "fontview.exe", "category": "windows", "original_filenames": [ "FONTVIEW.EXE" ], "primary": "FONTVIEW.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fontview.exe/" }, { "name": "forfiles.exe", "category": "lolbin", "original_filenames": [ "forfiles.exe" ], "primary": "forfiles.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/forfiles.exe/" }, { "name": "format.com", "category": "windows", "original_filenames": [ "format.com" ], "primary": "format.com", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/format.com/" }, { "name": "fsavailux.exe", "category": "windows", "original_filenames": [ "fsavailux.exe" ], "primary": "fsavailux.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fsavailux.exe/" }, { "name": "fsiso.exe", "category": "windows", "original_filenames": [ "FsIso.exe" ], "primary": "FsIso.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fsiso.exe/" }, { "name": "fsquirt.exe", "category": "windows", "original_filenames": [ "fsquirt.exe" ], "primary": "fsquirt.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fsquirt.exe/" }, { "name": "fsutil.exe", "category": "lolbin", "original_filenames": [ "fsutil.exe" ], "primary": "fsutil.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fsutil.exe/" }, { "name": "ftp.exe", "category": "lolbin", "original_filenames": [ "ftp.exe" ], "primary": "ftp.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ftp.exe/" }, { "name": "fvenotify.exe", "category": "windows", "original_filenames": [ "FVENOTIFY.EXE" ], "primary": "FVENOTIFY.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fvenotify.exe/" }, { "name": "fveprompt.exe", "category": "windows", "original_filenames": [ "FVEPROMPT.EXE" ], "primary": "FVEPROMPT.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fveprompt.exe/" }, { "name": "fxssvc.exe", "category": "windows", "original_filenames": [ "FXSSVC.EXE" ], "primary": "FXSSVC.EXE", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/fxssvc.exe/" }, { "name": "gamebarpresencewriter.exe", "category": "windows", "original_filenames": [ "GamebarPresenceWriter.exe" ], "primary": "GamebarPresenceWriter.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/gamebarpresencewriter.exe/" }, { "name": "gameinputsvc.exe", "category": "windows", "original_filenames": [ "GameInputSvc.exe" ], "primary": "GameInputSvc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/gameinputsvc.exe/" }, { "name": "gamepanel.exe", "category": "windows", "original_filenames": [ "gamepanel.exe" ], "primary": "gamepanel.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/gamepanel.exe/" }, { "name": "genvalobj.exe", "category": "windows", "original_filenames": [ "GenValObj.exe" ], "primary": "GenValObj.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/genvalobj.exe/" }, { "name": "getmac.exe", "category": "windows", "original_filenames": [ "GetMac.exe" ], "primary": "GetMac.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/getmac.exe/" }, { "name": "gpresult.exe", "category": "windows", "original_filenames": [ "gprslt.exe" ], "primary": "gprslt.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/gpresult.exe/" }, { "name": "gpscript.exe", "category": "lolbin", "original_filenames": [ "GPSCRIPT.EXE" ], "primary": "GPSCRIPT.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/gpscript.exe/" }, { "name": "gpupdate.exe", "category": "windows", "original_filenames": [ "GPUpdate.exe" ], "primary": "GPUpdate.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/gpupdate.exe/" }, { "name": "grpconv.exe", "category": "windows", "original_filenames": [ "GRPCONV.EXE" ], "primary": "GRPCONV.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/grpconv.exe/" }, { "name": "handle.exe", "category": "sysinternals", "original_filenames": [ "Nthandle.exe" ], "primary": "Nthandle.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/handle.exe/" }, { "name": "handle64.exe", "category": "sysinternals", "original_filenames": [ "Nthandle.exe" ], "primary": "Nthandle.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/handle64.exe/" }, { "name": "hcsdiag.exe", "category": "windows", "original_filenames": [ "Hyper-V Host Compute Service Diagnostics Tool" ], "primary": "Hyper-V Host Compute Service Diagnostics Tool", "sensor_verified": false, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/hcsdiag.exe/" }, { "name": "hdwwiz.exe", "category": "windows", "original_filenames": [ "HdwWiz.EXE" ], "primary": "HdwWiz.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/hdwwiz.exe/" }, { "name": "healthattestationclientagent.exe", "category": "windows", "original_filenames": [ "HealthAttestationClientAgent.exe" ], "primary": "HealthAttestationClientAgent.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/healthattestationclientagent.exe/" }, { "name": "help.exe", "category": "windows", "original_filenames": [ "Help.Exe" ], "primary": "Help.Exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/help.exe/" }, { "name": "helppane.exe", "category": "windows", "original_filenames": [ "HelpPane.exe" ], "primary": "HelpPane.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/helppane.exe/" }, { "name": "hex2dec.exe", "category": "sysinternals", "original_filenames": [ "hex2dec.exe" ], "primary": "hex2dec.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/hex2dec.exe/" }, { "name": "hex2dec64.exe", "category": "sysinternals", "original_filenames": [ "hex2dec.exe" ], "primary": "hex2dec.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/hex2dec64.exe/" }, { "name": "hh.exe", "category": "lolbin", "original_filenames": [ "HH.exe" ], "primary": "HH.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/hh.exe/" }, { "name": "hnsdiag.exe", "category": "windows", "original_filenames": [ "Hyper-V Host Network Service Diagnostics Tool" ], "primary": "Hyper-V Host Network Service Diagnostics Tool", "sensor_verified": false, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/hnsdiag.exe/" }, { "name": "hostname.exe", "category": "windows", "original_filenames": [ "hostname.exe" ], "primary": "hostname.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/hostname.exe/" }, { "name": "hvax64.exe", "category": "windows", "original_filenames": [ "hvax64.exe" ], "primary": "hvax64.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/hvax64.exe/" }, { "name": "hvc.exe", "category": "windows", "original_filenames": [ "Hyper-V Command Line Tool" ], "primary": "Hyper-V Command Line Tool", "sensor_verified": false, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/hvc.exe/" }, { "name": "hvix64.exe", "category": "windows", "original_filenames": [ "hvix64.exe" ], "primary": "hvix64.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/hvix64.exe/" }, { "name": "hvsievaluator.exe", "category": "windows", "original_filenames": [ "HvsiEvaluator.exe" ], "primary": "HvsiEvaluator.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/hvsievaluator.exe/" }, { "name": "hvsiproxyapp.exe", "category": "windows", "original_filenames": [ "HvsiProxyApp.exe" ], "primary": "HvsiProxyApp.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/hvsiproxyapp.exe/" }, { "name": "hvsisettingsworker.exe", "category": "windows", "original_filenames": [ "HvsiSettingsWorker.exe" ], "primary": "HvsiSettingsWorker.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/hvsisettingsworker.exe/" }, { "name": "icacls.exe", "category": "windows", "original_filenames": [ "iCACLS.EXE" ], "primary": "iCACLS.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/icacls.exe/" }, { "name": "icsunattend.exe", "category": "windows", "original_filenames": [ "icsunattend.exe" ], "primary": "icsunattend.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/icsunattend.exe/" }, { "name": "ie4uinit.exe", "category": "lolbin", "original_filenames": [ "IE4UINIT.EXE" ], "primary": "IE4UINIT.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ie4uinit.exe/" }, { "name": "ie4ushowie.exe", "category": "windows", "original_filenames": [ "IE4USHOWIE.EXE" ], "primary": "IE4USHOWIE.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ie4ushowie.exe/" }, { "name": "ieadvpack.dll", "category": "lolbin", "original_filenames": [ "ADVPACK.DLL" ], "primary": "ADVPACK.DLL", "sensor_verified": false, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ieadvpack.dll/" }, { "name": "iechooser.exe", "category": "windows", "original_filenames": [ "F12Chooser.exe" ], "primary": "F12Chooser.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/iechooser.exe/" }, { "name": "iediagcmd.exe", "category": "lolbin", "original_filenames": [ "IEDiagCmd.exe" ], "primary": "IEDiagCmd.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/iediagcmd.exe/" }, { "name": "ieframe.dll", "category": "lolbin", "original_filenames": [ "IEFRAME.DLL" ], "primary": "IEFRAME.DLL", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ieframe.dll/" }, { "name": "ieinstal.exe", "category": "windows", "original_filenames": [ "ieinstal.exe" ], "primary": "ieinstal.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ieinstal.exe/" }, { "name": "iesettingsync.exe", "category": "windows", "original_filenames": [ "IESettingSync.exe" ], "primary": "IESettingSync.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/iesettingsync.exe/" }, { "name": "ieunatt.exe", "category": "windows", "original_filenames": [ "IEUNATT.EXE" ], "primary": "IEUNATT.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ieunatt.exe/" }, { "name": "iexplore.exe", "category": "windows", "original_filenames": [ "IEXPLORE.EXE" ], "primary": "IEXPLORE.EXE", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/iexplore.exe/" }, { "name": "iexpress.exe", "category": "windows", "original_filenames": [ "IEXPRESS.EXE" ], "primary": "IEXPRESS.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/iexpress.exe/" }, { "name": "iissetup.exe", "category": "windows", "original_filenames": [ "iissetup.exe" ], "primary": "iissetup.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/iissetup.exe/" }, { "name": "ilasm.exe", "category": "lolbin", "original_filenames": [ "ilasm.exe" ], "primary": "ilasm.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ilasm.exe/" }, { "name": "imagingdevices.exe", "category": "windows", "original_filenames": [ "ImagingDevices.cpl" ], "primary": "ImagingDevices.cpl", "sensor_verified": false, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/imagingdevices.exe/" }, { "name": "imccphr.exe", "category": "windows", "original_filenames": [ "IMCCPHR.exe" ], "primary": "IMCCPHR.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/imccphr.exe/" }, { "name": "imebroker.exe", "category": "windows", "original_filenames": [ "ImeBroker.exe" ], "primary": "ImeBroker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/imebroker.exe/" }, { "name": "imecfmui.exe", "category": "windows", "original_filenames": [ "imecfmui.exe" ], "primary": "imecfmui.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/imecfmui.exe/" }, { "name": "imepadsv.exe", "category": "windows", "original_filenames": [ "Microsoft IME" ], "primary": "Microsoft IME", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/imepadsv.exe/" }, { "name": "imesearch.exe", "category": "windows", "original_filenames": [ "imesearch.exe" ], "primary": "imesearch.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/imesearch.exe/" }, { "name": "imewdbld.exe", "category": "lolbin", "original_filenames": [ "imewdbld.exe" ], "primary": "imewdbld.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/imewdbld.exe/" }, { "name": "imjpdct.exe", "category": "windows", "original_filenames": [ "imjpdct.exe" ], "primary": "imjpdct.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/imjpdct.exe/" }, { "name": "imjpset.exe", "category": "windows", "original_filenames": [ "IMJPSET.exe" ], "primary": "IMJPSET.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/imjpset.exe/" }, { "name": "imjpuex.exe", "category": "windows", "original_filenames": [ "imjpuex.exe" ], "primary": "imjpuex.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/imjpuex.exe/" }, { "name": "imjpuexc.exe", "category": "windows", "original_filenames": [ "imjpuexc.exe" ], "primary": "imjpuexc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/imjpuexc.exe/" }, { "name": "immersivetpmvscmgrsvr.exe", "category": "windows", "original_filenames": [ "ImmersiveTpmVscMgrSvr.exe" ], "primary": "ImmersiveTpmVscMgrSvr.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/immersivetpmvscmgrsvr.exe/" }, { "name": "imtclnwz.exe", "category": "windows", "original_filenames": [ "IMTCLNWZ.exe" ], "primary": "IMTCLNWZ.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/imtclnwz.exe/" }, { "name": "imtcprop.exe", "category": "windows", "original_filenames": [ "IMTCPROP.exe" ], "primary": "IMTCPROP.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/imtcprop.exe/" }, { "name": "infdefaultinstall.exe", "category": "lolbin", "original_filenames": [ "InfDefaultInstall.EXE" ], "primary": "InfDefaultInstall.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/infdefaultinstall.exe/" }, { "name": "inputswitchtoasthandler.exe", "category": "windows", "original_filenames": [ "InputSwitchToastHandler.exe" ], "primary": "InputSwitchToastHandler.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/inputswitchtoasthandler.exe/" }, { "name": "inspectvhddialog.exe", "category": "windows", "original_filenames": [ "InspectVhdDialog.exe" ], "primary": "InspectVhdDialog.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/inspectvhddialog.exe/" }, { "name": "installutil.exe", "category": "lolbin", "original_filenames": [ "InstallUtil.exe" ], "primary": "InstallUtil.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/installutil.exe/" }, { "name": "instnm.exe", "category": "windows", "original_filenames": [ "instnm.exe" ], "primary": "instnm.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/instnm.exe/" }, { "name": "iotstartup.exe", "category": "windows", "original_filenames": [ "iotstartup.exe" ], "primary": "iotstartup.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/iotstartup.exe/" }, { "name": "ipconfig.exe", "category": "windows", "original_filenames": [ "ipconfig.exe" ], "primary": "ipconfig.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ipconfig.exe/" }, { "name": "iscsicli.exe", "category": "windows", "original_filenames": [ "iscsicli.exe" ], "primary": "iscsicli.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/iscsicli.exe/" }, { "name": "iscsicpl.exe", "category": "lolbin", "original_filenames": [ "iscsicpl.exe" ], "primary": "iscsicpl.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/iscsicpl.exe/" }, { "name": "ism.exe", "category": "windows", "original_filenames": [ "ISM.exe" ], "primary": "ISM.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ism.exe/" }, { "name": "isoburn.exe", "category": "windows", "original_filenames": [ "ISOBURN.EXE" ], "primary": "ISOBURN.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/isoburn.exe/" }, { "name": "isolationproxy.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/isolationproxy.exe/" }, { "name": "jsc.exe", "category": "lolbin", "original_filenames": [ "jsc.exe" ], "primary": "jsc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/jsc.exe/" }, { "name": "junction.exe", "category": "sysinternals", "original_filenames": [ "junction.exe" ], "primary": "junction.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/junction.exe/" }, { "name": "junction64.exe", "category": "sysinternals", "original_filenames": [ "junction.exe" ], "primary": "junction.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/junction64.exe/" }, { "name": "klist.exe", "category": "windows", "original_filenames": [ "klist.exe" ], "primary": "klist.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/klist.exe/" }, { "name": "ksetup.exe", "category": "windows", "original_filenames": [ "ksetup.exe" ], "primary": "ksetup.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ksetup.exe/" }, { "name": "ktmutil.exe", "category": "windows", "original_filenames": [ "ktmutil.exe" ], "primary": "ktmutil.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ktmutil.exe/" }, { "name": "la57setup.exe", "category": "windows", "original_filenames": [ "la57setup.dll" ], "primary": "la57setup.dll", "sensor_verified": true, "flags": [ "differs-from-name", "dll-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/la57setup.exe/" }, { "name": "label.exe", "category": "windows", "original_filenames": [ "Label.Exe" ], "primary": "Label.Exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/label.exe/" }, { "name": "languagecomponentsinstallercomhandler.exe", "category": "windows", "original_filenames": [ "LanguageComponentsInstallerComHandler.exe" ], "primary": "LanguageComponentsInstallerComHandler.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/languagecomponentsinstallercomhandler.exe/" }, { "name": "launchtm.exe", "category": "windows", "original_filenames": [ "LaunchTM.exe" ], "primary": "LaunchTM.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/launchtm.exe/" }, { "name": "launchwinapp.exe", "category": "windows", "original_filenames": [ "LaunchWinApp.exe" ], "primary": "LaunchWinApp.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/launchwinapp.exe/" }, { "name": "ldifde.exe", "category": "lolbin", "original_filenames": [ "ldifde.exe" ], "primary": "ldifde.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ldifde.exe/" }, { "name": "ldmdump.exe", "category": "sysinternals", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ldmdump.exe/" }, { "name": "legacynetuxhost.exe", "category": "windows", "original_filenames": [ "LegacyNetUXHost.exe" ], "primary": "LegacyNetUXHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/legacynetuxhost.exe/" }, { "name": "licensemanagershellext.exe", "category": "windows", "original_filenames": [ "LicenseManagerShellExt.exe" ], "primary": "LicenseManagerShellExt.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/licensemanagershellext.exe/" }, { "name": "licensingdiag.exe", "category": "windows", "original_filenames": [ "LicensingDiag.exe" ], "primary": "LicensingDiag.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/licensingdiag.exe/" }, { "name": "licensingui.exe", "category": "windows", "original_filenames": [ "LicensingUI.exe" ], "primary": "LicensingUI.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/licensingui.exe/" }, { "name": "link.exe", "category": "windows", "original_filenames": [ "LINK.EXE" ], "primary": "LINK.EXE", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/link.exe/" }, { "name": "listdlls.exe", "category": "sysinternals", "original_filenames": [ "Listdlls.exe" ], "primary": "Listdlls.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/listdlls.exe/" }, { "name": "listdlls64.exe", "category": "sysinternals", "original_filenames": [ "Listdlls.exe" ], "primary": "Listdlls.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/listdlls64.exe/" }, { "name": "livecaptions.exe", "category": "windows", "original_filenames": [ "LiveCaptions.exe" ], "primary": "LiveCaptions.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/livecaptions.exe/" }, { "name": "livekd.exe", "category": "sysinternals", "original_filenames": [ "livekd.exe" ], "primary": "livekd.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/livekd.exe/" }, { "name": "livekd64.exe", "category": "sysinternals", "original_filenames": [ "livekd.exe" ], "primary": "livekd.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/livekd64.exe/" }, { "name": "loadord.exe", "category": "sysinternals", "original_filenames": [ "Loadord" ], "primary": "Loadord", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/loadord.exe/" }, { "name": "loadord64.exe", "category": "sysinternals", "original_filenames": [ "Loadord" ], "primary": "Loadord", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/loadord64.exe/" }, { "name": "loadordc.exe", "category": "sysinternals", "original_filenames": [ "Loadord" ], "primary": "Loadord", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/loadordc.exe/" }, { "name": "loadordc64.exe", "category": "sysinternals", "original_filenames": [ "Loadord" ], "primary": "Loadord", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/loadordc64.exe/" }, { "name": "locator.exe", "category": "windows", "original_filenames": [ "locator.exe" ], "primary": "locator.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/locator.exe/" }, { "name": "lockapphost.exe", "category": "windows", "original_filenames": [ "LockAppHost.exe" ], "primary": "LockAppHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/lockapphost.exe/" }, { "name": "lockscreencontentserver.exe", "category": "windows", "original_filenames": [ "LockScreenContentServer.exe" ], "primary": "LockScreenContentServer.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/lockscreencontentserver.exe/" }, { "name": "lodctr.exe", "category": "windows", "original_filenames": [ "LODCTR.EXE" ], "primary": "LODCTR.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/lodctr.exe/" }, { "name": "logagent.exe", "category": "windows", "original_filenames": [ "logagent.exe" ], "primary": "logagent.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/logagent.exe/" }, { "name": "logman.exe", "category": "windows", "original_filenames": [ "Logman.exe" ], "primary": "Logman.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/logman.exe/" }, { "name": "logoff.exe", "category": "windows", "original_filenames": [ "logoff.exe" ], "primary": "logoff.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/logoff.exe/" }, { "name": "logonsessions.exe", "category": "sysinternals", "original_filenames": [ "logonsessions.exe" ], "primary": "logonsessions.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/logonsessions.exe/" }, { "name": "logonsessions64.exe", "category": "sysinternals", "original_filenames": [ "logonsessions.exe" ], "primary": "logonsessions.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/logonsessions64.exe/" }, { "name": "logonui.exe", "category": "windows", "original_filenames": [ "logonui.exe" ], "primary": "logonui.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/logonui.exe/" }, { "name": "lpkinstall.exe", "category": "windows", "original_filenames": [ "lpkinstall.exe" ], "primary": "lpkinstall.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/lpkinstall.exe/" }, { "name": "lpksetup.exe", "category": "windows", "original_filenames": [ "lpksetup.exe" ], "primary": "lpksetup.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/lpksetup.exe/" }, { "name": "lpremove.exe", "category": "windows", "original_filenames": [ "lpremove.exe" ], "primary": "lpremove.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/lpremove.exe/" }, { "name": "lsaiso.exe", "category": "windows", "original_filenames": [ "LsaIso.exe" ], "primary": "LsaIso.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/lsaiso.exe/" }, { "name": "lsass.exe", "category": "windows", "original_filenames": [ "lsass.exe" ], "primary": "lsass.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/lsass.exe/" }, { "name": "magnify.exe", "category": "windows", "original_filenames": [ "ScreenMagnifier.exe" ], "primary": "ScreenMagnifier.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/magnify.exe/" }, { "name": "makecab.exe", "category": "lolbin", "original_filenames": [ "makecab.exe" ], "primary": "makecab.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/makecab.exe/" }, { "name": "manage-bde.exe", "category": "windows", "original_filenames": [ "manage-bde.exe" ], "primary": "manage-bde.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/manage-bde.exe/" }, { "name": "managedwindowsvm.exe", "category": "windows", "original_filenames": [ "ManagedWindowsVM.exe" ], "primary": "ManagedWindowsVM.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/managedwindowsvm.exe/" }, { "name": "mavinject.exe", "category": "lolbin", "original_filenames": [ "mavinject32.exe", "mavinject64.exe" ], "primary": "mavinject64.exe", "sensor_verified": true, "flags": [ "differs-from-name", "drift" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mavinject.exe/" }, { "name": "mblctr.exe", "category": "windows", "original_filenames": [ "MBLCTR.EXE" ], "primary": "MBLCTR.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mblctr.exe/" }, { "name": "mbr2gpt.exe", "category": "windows", "original_filenames": [ "mbr2gpt.exe" ], "primary": "mbr2gpt.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mbr2gpt.exe/" }, { "name": "mcbuilder.exe", "category": "windows", "original_filenames": [ "mcbuilder.exe" ], "primary": "mcbuilder.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mcbuilder.exe/" }, { "name": "mcu.exe", "category": "windows", "original_filenames": [ "MCU.exe" ], "primary": "MCU.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mcu.exe/" }, { "name": "mdeserver.exe", "category": "windows", "original_filenames": [ "MDEServer.exe" ], "primary": "MDEServer.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mdeserver.exe/" }, { "name": "mdmagent.exe", "category": "windows", "original_filenames": [ "MDMAgent" ], "primary": "MDMAgent", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mdmagent.exe/" }, { "name": "mdmappinstaller.exe", "category": "windows", "original_filenames": [ "MDMAppInstaller.exe" ], "primary": "MDMAppInstaller.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mdmappinstaller.exe/" }, { "name": "mdmdiagnosticstool.exe", "category": "windows", "original_filenames": [ "MdmDiagnosticsTool.exe" ], "primary": "MdmDiagnosticsTool.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mdmdiagnosticstool.exe/" }, { "name": "mdres.exe", "category": "windows", "original_filenames": [ "MdRes.exe" ], "primary": "MdRes.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mdres.exe/" }, { "name": "mdsched.exe", "category": "windows", "original_filenames": [ "MdSched.exe" ], "primary": "MdSched.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mdsched.exe/" }, { "name": "mfpmp.exe", "category": "windows", "original_filenames": [ "mf.dll" ], "primary": "mf.dll", "sensor_verified": true, "flags": [ "differs-from-name", "dll-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mfpmp.exe/" }, { "name": "microsoft.data.usageandqualityinsights.maintenancetask.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/microsoft.data.usageandqualityinsights.maintenancetask.exe/" }, { "name": "microsoft.identityserver.servicehost.exe", "category": "windows", "original_filenames": [ "Microsoft.IdentityServer.ServiceHost.exe" ], "primary": "Microsoft.IdentityServer.ServiceHost.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/microsoft.identityserver.servicehost.exe/" }, { "name": "microsoft.uev.cscunpintool.exe", "category": "windows", "original_filenames": [ "Microsoft.Uev.CscUnpinTool.exe" ], "primary": "Microsoft.Uev.CscUnpinTool.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/microsoft.uev.cscunpintool.exe/" }, { "name": "microsoft.uev.synccontroller.exe", "category": "windows", "original_filenames": [ "Microsoft.Uev.SyncController.exe" ], "primary": "Microsoft.Uev.SyncController.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/microsoft.uev.synccontroller.exe/" }, { "name": "microsoft.workflow.compiler.exe", "category": "lolbin", "original_filenames": [ "Microsoft.Workflow.Compiler.exe" ], "primary": "Microsoft.Workflow.Compiler.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/microsoft.workflow.compiler.exe/" }, { "name": "microsoftedge.exe", "category": "windows", "original_filenames": [ "MicrosoftEdge.exe" ], "primary": "MicrosoftEdge.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/microsoftedge.exe/" }, { "name": "microsoftedgebchost.exe", "category": "windows", "original_filenames": [ "MicrosoftEdgeCP.exe" ], "primary": "MicrosoftEdgeCP.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/microsoftedgebchost.exe/" }, { "name": "microsoftedgecp.exe", "category": "windows", "original_filenames": [ "MicrosoftEdgeCP.exe" ], "primary": "MicrosoftEdgeCP.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/microsoftedgecp.exe/" }, { "name": "microsoftedgedevtools.exe", "category": "windows", "original_filenames": [ "MicrosoftEdgeCP.exe" ], "primary": "MicrosoftEdgeCP.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/microsoftedgedevtools.exe/" }, { "name": "microsoftedgesh.exe", "category": "windows", "original_filenames": [ "MicrosoftEdgeSH.exe" ], "primary": "MicrosoftEdgeSH.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/microsoftedgesh.exe/" }, { "name": "midisrv.exe", "category": "windows", "original_filenames": [ "midisrv.exe" ], "primary": "midisrv.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/midisrv.exe/" }, { "name": "mighost.exe", "category": "windows", "original_filenames": [ "MigHost.exe" ], "primary": "MigHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mighost.exe/" }, { "name": "migregdb.exe", "category": "windows", "original_filenames": [ "MIGREGDB.EXE" ], "primary": "MIGREGDB.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/migregdb.exe/" }, { "name": "miracastpowermanager.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/miracastpowermanager.exe/" }, { "name": "mlenginestub.exe", "category": "windows", "original_filenames": [ "MLEngineStub" ], "primary": "MLEngineStub", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mlenginestub.exe/" }, { "name": "mmc.exe", "category": "lolbin", "original_filenames": [ "mmc.exe" ], "primary": "mmc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mmc.exe/" }, { "name": "mmgaserver.exe", "category": "windows", "original_filenames": [ "mmgaserver.exe" ], "primary": "mmgaserver.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mmgaserver.exe/" }, { "name": "mobsync.exe", "category": "windows", "original_filenames": [ "mobsync.exe" ], "primary": "mobsync.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mobsync.exe/" }, { "name": "mode.com", "category": "windows", "original_filenames": [ "MODE.COM" ], "primary": "MODE.COM", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mode.com/" }, { "name": "mofcomp.exe", "category": "lolbin", "original_filenames": [ "mofcomp.exe" ], "primary": "mofcomp.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mofcomp.exe/" }, { "name": "monotificationuxstub.exe", "category": "windows", "original_filenames": [ "MoNotificationUxStub" ], "primary": "MoNotificationUxStub", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/monotificationuxstub.exe/" }, { "name": "more.com", "category": "windows", "original_filenames": [ "MORE.COM" ], "primary": "MORE.COM", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/more.com/" }, { "name": "mountvol.exe", "category": "windows", "original_filenames": [ "MOUNTVOL.EXE" ], "primary": "MOUNTVOL.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mountvol.exe/" }, { "name": "mousocoreworker.exe", "category": "windows", "original_filenames": [ "MoUSOCoreWorker.exe" ], "primary": "MoUSOCoreWorker.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mousocoreworker.exe/" }, { "name": "movefile.exe", "category": "sysinternals", "original_filenames": [ "movefile" ], "primary": "movefile", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/movefile.exe/" }, { "name": "movefile64.exe", "category": "sysinternals", "original_filenames": [ "movefile" ], "primary": "movefile", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/movefile64.exe/" }, { "name": "mpcmdrun.exe", "category": "lolbin", "original_filenames": [ "MpCmdRun.exe" ], "primary": "MpCmdRun.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mpcmdrun.exe/" }, { "name": "mpcopyaccelerator.exe", "category": "windows", "original_filenames": [ "MpCopyAccelerator.exe" ], "primary": "MpCopyAccelerator.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mpcopyaccelerator.exe/" }, { "name": "mpnotify.exe", "category": "windows", "original_filenames": [ "mpnotify.exe" ], "primary": "mpnotify.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mpnotify.exe/" }, { "name": "mpsigstub.exe", "category": "windows", "original_filenames": [ "MpSigStub.exe" ], "primary": "MpSigStub.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mpsigstub.exe/" }, { "name": "mptfgenericservice.exe", "category": "windows", "original_filenames": [ "MptfGenericService.exe" ], "primary": "MptfGenericService.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mptfgenericservice.exe/" }, { "name": "mqsvc.exe", "category": "windows", "original_filenames": [ "MQSVC.EXE" ], "primary": "MQSVC.EXE", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mqsvc.exe/" }, { "name": "mrinfo.exe", "category": "windows", "original_filenames": [ "mrinfo.exe" ], "primary": "mrinfo.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mrinfo.exe/" }, { "name": "mrt.exe", "category": "windows", "original_filenames": [ "mrt.exe" ], "primary": "mrt.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mrt.exe/" }, { "name": "msbuild.exe", "category": "lolbin", "original_filenames": [ "MSBuild.exe" ], "primary": "MSBuild.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/msbuild.exe/" }, { "name": "mschedexe.exe", "category": "windows", "original_filenames": [ "MSchedExe.EXE" ], "primary": "MSchedExe.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mschedexe.exe/" }, { "name": "msconfig.exe", "category": "lolbin", "original_filenames": [ "msconfig.EXE", null ], "primary": "msconfig.EXE", "sensor_verified": true, "flags": [ "partial-no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/msconfig.exe/" }, { "name": "mscopilot.exe", "category": "lolbin", "original_filenames": [ "mscopilot.exe" ], "primary": "mscopilot.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mscopilot.exe/" }, { "name": "mscorsvw.exe", "category": "windows", "original_filenames": [ "mscorsvw.exe" ], "primary": "mscorsvw.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mscorsvw.exe/" }, { "name": "msdt.exe", "category": "lolbin", "original_filenames": [ "msdt.exe" ], "primary": "msdt.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/msdt.exe/" }, { "name": "msdtc.exe", "category": "windows", "original_filenames": [ "MSDTC.EXE" ], "primary": "MSDTC.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/msdtc.exe/" }, { "name": "msedgewebview2.exe", "category": "lolbin", "original_filenames": [ "msedgewebview2.exe" ], "primary": "msedgewebview2.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/msedgewebview2.exe/" }, { "name": "msfeedssync.exe", "category": "windows", "original_filenames": [ "msfeedssync.exe" ], "primary": "msfeedssync.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/msfeedssync.exe/" }, { "name": "msg.exe", "category": "windows", "original_filenames": [ "msg.exe" ], "primary": "msg.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/msg.exe/" }, { "name": "mshta.exe", "category": "lolbin", "original_filenames": [ "MSHTA.EXE" ], "primary": "MSHTA.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mshta.exe/" }, { "name": "mshtml.dll", "category": "lolbin", "original_filenames": [ "MSHTML.DLL" ], "primary": "MSHTML.DLL", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mshtml.dll/" }, { "name": "msiexec.exe", "category": "lolbin", "original_filenames": [ "msiexec.exe" ], "primary": "msiexec.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/msiexec.exe/" }, { "name": "msinfo32.exe", "category": "windows", "original_filenames": [ "msinfo.dll" ], "primary": "msinfo.dll", "sensor_verified": true, "flags": [ "differs-from-name", "dll-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/msinfo32.exe/" }, { "name": "msmpeng.exe", "category": "windows", "original_filenames": [ "MsMpEng.exe" ], "primary": "MsMpEng.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/msmpeng.exe/" }, { "name": "msoobe.exe", "category": "windows", "original_filenames": [ "msoobe.exe" ], "primary": "msoobe.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/msoobe.exe/" }, { "name": "msra.exe", "category": "windows", "original_filenames": [ "msra.exe" ], "primary": "msra.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/msra.exe/" }, { "name": "msspellcheckinghost.exe", "category": "windows", "original_filenames": [ "MsSpellCheckingHost.exe" ], "primary": "MsSpellCheckingHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/msspellcheckinghost.exe/" }, { "name": "mstsc.exe", "category": "windows", "original_filenames": [ "mstsc.exe" ], "primary": "mstsc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mstsc.exe/" }, { "name": "mtkbtsvc.exe", "category": "windows", "original_filenames": [ "MTKBTSVC.exe" ], "primary": "MTKBTSVC.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mtkbtsvc.exe/" }, { "name": "mtstocom.exe", "category": "windows", "original_filenames": [ "MTSTOCOM.EXE" ], "primary": "MTSTOCOM.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/mtstocom.exe/" }, { "name": "muiunattend.exe", "category": "windows", "original_filenames": [ "MuiUnattend.exe" ], "primary": "MuiUnattend.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/muiunattend.exe/" }, { "name": "multidigimon.exe", "category": "windows", "original_filenames": [ "MultiDigiMon.exe" ], "primary": "MultiDigiMon.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/multidigimon.exe/" }, { "name": "narrator.exe", "category": "windows", "original_filenames": [ "SR.exe" ], "primary": "SR.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/narrator.exe/" }, { "name": "narratormathhost.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/narratormathhost.exe/" }, { "name": "nbtstat.exe", "category": "windows", "original_filenames": [ "nbtinfo.exe" ], "primary": "nbtinfo.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/nbtstat.exe/" }, { "name": "ndadmin.exe", "category": "windows", "original_filenames": [ "NDAdmin.EXE" ], "primary": "NDAdmin.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ndadmin.exe/" }, { "name": "ndkperfcmd.exe", "category": "windows", "original_filenames": [ "RdmaPerf.sys" ], "primary": "RdmaPerf.sys", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ndkperfcmd.exe/" }, { "name": "ndkping.exe", "category": "windows", "original_filenames": [ "RdmaPing.sys" ], "primary": "RdmaPing.sys", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ndkping.exe/" }, { "name": "net.exe", "category": "windows", "original_filenames": [ "net.exe" ], "primary": "net.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/net.exe/" }, { "name": "net1.exe", "category": "windows", "original_filenames": [ "net1.exe" ], "primary": "net1.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/net1.exe/" }, { "name": "netbtugc.exe", "category": "windows", "original_filenames": [ "netbtugc.exe" ], "primary": "netbtugc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/netbtugc.exe/" }, { "name": "netcfg.exe", "category": "windows", "original_filenames": [ "netcfg.exe" ], "primary": "netcfg.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/netcfg.exe/" }, { "name": "netcfgnotifyobjecthost.exe", "category": "windows", "original_filenames": [ "NetCfgNotifyObjectHost.exe" ], "primary": "NetCfgNotifyObjectHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/netcfgnotifyobjecthost.exe/" }, { "name": "netdom.exe", "category": "windows", "original_filenames": [ "NETDOM.EXE" ], "primary": "NETDOM.EXE", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/netdom.exe/" }, { "name": "netevtfwdr.exe", "category": "windows", "original_filenames": [ "NetEvtFwdr.EXE" ], "primary": "NetEvtFwdr.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/netevtfwdr.exe/" }, { "name": "nethost.exe", "category": "windows", "original_filenames": [ "nethost.exe" ], "primary": "nethost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/nethost.exe/" }, { "name": "netiougc.exe", "category": "windows", "original_filenames": [ "netiougc.exe" ], "primary": "netiougc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/netiougc.exe/" }, { "name": "netplwiz.exe", "category": "windows", "original_filenames": [ "NETPLWIZ.EXE" ], "primary": "NETPLWIZ.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/netplwiz.exe/" }, { "name": "netsh.exe", "category": "lolbin", "original_filenames": [ "netsh.exe" ], "primary": "netsh.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/netsh.exe/" }, { "name": "netstat.exe", "category": "windows", "original_filenames": [ "netstat.exe" ], "primary": "netstat.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/netstat.exe/" }, { "name": "newdev.exe", "category": "windows", "original_filenames": [ "NewDev.EXE" ], "primary": "NewDev.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/newdev.exe/" }, { "name": "ngciso.exe", "category": "windows", "original_filenames": [ "NgcIso.exe" ], "primary": "NgcIso.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ngciso.exe/" }, { "name": "ngen.exe", "category": "lolbin", "original_filenames": [ "ngen.exe" ], "primary": "ngen.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ngen.exe/" }, { "name": "ngentask.exe", "category": "windows", "original_filenames": [ "NGenTask.exe" ], "primary": "NGenTask.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ngentask.exe/" }, { "name": "nissrv.exe", "category": "windows", "original_filenames": [ "NisSrv.exe" ], "primary": "NisSrv.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/nissrv.exe/" }, { "name": "nltest.exe", "category": "windows", "original_filenames": [ "nltestrk.exe", "nltest.exe" ], "primary": "nltest.exe", "sensor_verified": true, "flags": [ "drift" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/nltest.exe/" }, { "name": "nmbind.exe", "category": "windows", "original_filenames": [ "corebind.exe" ], "primary": "corebind.exe", "sensor_verified": false, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/nmbind.exe/" }, { "name": "nmscrub.exe", "category": "windows", "original_filenames": [ "nmscrub.exe" ], "primary": "nmscrub.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/nmscrub.exe/" }, { "name": "notepad.exe", "category": "windows", "original_filenames": [ "NOTEPAD.EXE" ], "primary": "NOTEPAD.EXE", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/notepad.exe/" }, { "name": "notification_helper.exe", "category": "windows", "original_filenames": [ "notification_helper.exe" ], "primary": "notification_helper.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/notification_helper.exe/" }, { "name": "notmyfault.exe", "category": "sysinternals", "original_filenames": [ "NotMyfault.exe" ], "primary": "NotMyfault.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/notmyfault.exe/" }, { "name": "notmyfault64.exe", "category": "sysinternals", "original_filenames": [ "NotMyfault.exe" ], "primary": "NotMyfault.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/notmyfault64.exe/" }, { "name": "notmyfaultc.exe", "category": "sysinternals", "original_filenames": [ "NotMyfaultC.exe" ], "primary": "NotMyfaultC.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/notmyfaultc.exe/" }, { "name": "notmyfaultc64.exe", "category": "sysinternals", "original_filenames": [ "NotMyfaultC.exe" ], "primary": "NotMyfaultC.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/notmyfaultc64.exe/" }, { "name": "npcaphelper.exe", "category": "windows", "original_filenames": [ "NpcapHelper.exe" ], "primary": "NpcapHelper.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/npcaphelper.exe/" }, { "name": "nslookup.exe", "category": "windows", "original_filenames": [ "nslookup.exe" ], "primary": "nslookup.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/nslookup.exe/" }, { "name": "ntdsutil.exe", "category": "lolbin", "original_filenames": [ "ntdsutil.exe" ], "primary": "ntdsutil.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ntdsutil.exe/" }, { "name": "ntfsinfo.exe", "category": "sysinternals", "original_filenames": [ "NtfsInfo.exe" ], "primary": "NtfsInfo.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ntfsinfo.exe/" }, { "name": "ntfsinfo64.exe", "category": "sysinternals", "original_filenames": [ "NtfsInfo.exe" ], "primary": "NtfsInfo.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ntfsinfo64.exe/" }, { "name": "ntoskrnl.exe", "category": "windows", "original_filenames": [ "ntkrnlmp.exe" ], "primary": "ntkrnlmp.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ntoskrnl.exe/" }, { "name": "ntprint.exe", "category": "windows", "original_filenames": [ "ntprint.exe" ], "primary": "ntprint.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ntprint.exe/" }, { "name": "nvdebugdump.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/nvdebugdump.exe/" }, { "name": "nvidia-pcc.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/nvidia-pcc.exe/" }, { "name": "nvidia-smi.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/nvidia-smi.exe/" }, { "name": "nvspinfo.exe", "category": "windows", "original_filenames": [ "\"nvspinfo.PROGRAM\"" ], "primary": "\"nvspinfo.PROGRAM\"", "sensor_verified": false, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/nvspinfo.exe/" }, { "name": "odbcad32.exe", "category": "lolbin", "original_filenames": [ "odbcad32.exe" ], "primary": "odbcad32.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/odbcad32.exe/" }, { "name": "odbcconf.exe", "category": "lolbin", "original_filenames": [ "odbcconf.exe" ], "primary": "odbcconf.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/odbcconf.exe/" }, { "name": "ofdeploy.exe", "category": "windows", "original_filenames": [ "OFDEPLOY.EXE" ], "primary": "OFDEPLOY.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ofdeploy.exe/" }, { "name": "offlinescannershell.exe", "category": "lolbin", "original_filenames": [ "OfflineScannerShell.exe" ], "primary": "OfflineScannerShell.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/offlinescannershell.exe/" }, { "name": "omadmclient.exe", "category": "windows", "original_filenames": [ "omadmclient.exe" ], "primary": "omadmclient.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/omadmclient.exe/" }, { "name": "omadmprc.exe", "category": "windows", "original_filenames": [ "omadmprc.exe" ], "primary": "omadmprc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/omadmprc.exe/" }, { "name": "onedrivesetup.exe", "category": "windows", "original_filenames": [ "OneDriveSetup.exe" ], "primary": "OneDriveSetup.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/onedrivesetup.exe/" }, { "name": "onenoteim.exe", "category": "windows", "original_filenames": [ "OneNoteIm.exe" ], "primary": "OneNoteIm.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/onenoteim.exe/" }, { "name": "oobefodsetup.exe", "category": "windows", "original_filenames": [ "OOBEFodSetup.exe" ], "primary": "OOBEFodSetup.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/oobefodsetup.exe/" }, { "name": "oobeldr.exe", "category": "windows", "original_filenames": [ "OOBELDR.EXE" ], "primary": "OOBELDR.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/oobeldr.exe/" }, { "name": "oobeshellhost.exe", "category": "windows", "original_filenames": [ "OobeShellHost.exe" ], "primary": "OobeShellHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/oobeshellhost.exe/" }, { "name": "openconsole.exe", "category": "lolbin", "original_filenames": [ "OpenConsole.exe" ], "primary": "OpenConsole.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/openconsole.exe/" }, { "name": "openfiles.exe", "category": "windows", "original_filenames": [ "opnfiles.exe" ], "primary": "opnfiles.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/openfiles.exe/" }, { "name": "openwith.exe", "category": "windows", "original_filenames": [ "OpenWith.exe" ], "primary": "OpenWith.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/openwith.exe/" }, { "name": "oposhost.exe", "category": "windows", "original_filenames": [ "oposhost.exe" ], "primary": "oposhost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/oposhost.exe/" }, { "name": "optionalfeatures.exe", "category": "windows", "original_filenames": [ "OptionalFeatures.EXE" ], "primary": "OptionalFeatures.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/optionalfeatures.exe/" }, { "name": "osk.exe", "category": "windows", "original_filenames": [ "osk.exe" ], "primary": "osk.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/osk.exe/" }, { "name": "pacjsworker.exe", "category": "windows", "original_filenames": [ "pacjsworker.exe" ], "primary": "pacjsworker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pacjsworker.exe/" }, { "name": "packagedcwalauncher.exe", "category": "windows", "original_filenames": [ "PackagedCWALauncher.exe" ], "primary": "PackagedCWALauncher.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/packagedcwalauncher.exe/" }, { "name": "packageinspector.exe", "category": "windows", "original_filenames": [ "PACKAGEINSPECTOR.EXE" ], "primary": "PACKAGEINSPECTOR.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/packageinspector.exe/" }, { "name": "pairtool.exe", "category": "windows", "original_filenames": [ "pairtool.exe" ], "primary": "pairtool.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pairtool.exe/" }, { "name": "passwordonwakesettingflyout.exe", "category": "windows", "original_filenames": [ "PasswordOnWakeSettingFlyout.exe" ], "primary": "PasswordOnWakeSettingFlyout.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/passwordonwakesettingflyout.exe/" }, { "name": "pathping.exe", "category": "windows", "original_filenames": [ "pathping.exe" ], "primary": "pathping.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pathping.exe/" }, { "name": "pcalua.exe", "category": "lolbin", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn", "sigma-mismatch" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pcalua.exe/" }, { "name": "pcaui.exe", "category": "windows", "original_filenames": [ "pcaui.exe" ], "primary": "pcaui.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pcaui.exe/" }, { "name": "pcwrun.exe", "category": "lolbin", "original_filenames": [ "pcwrun.exe" ], "primary": "pcwrun.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pcwrun.exe/" }, { "name": "pcwutl.dll", "category": "lolbin", "original_filenames": [ "pcwutl.dll" ], "primary": "pcwutl.dll", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pcwutl.dll/" }, { "name": "pendmoves.exe", "category": "sysinternals", "original_filenames": [ "pendmoves.exe" ], "primary": "pendmoves.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pendmoves.exe/" }, { "name": "pendmoves64.exe", "category": "sysinternals", "original_filenames": [ "pendmoves.exe" ], "primary": "pendmoves.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pendmoves64.exe/" }, { "name": "perfhost.exe", "category": "windows", "original_filenames": [ "perfhost.exe" ], "primary": "perfhost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/perfhost.exe/" }, { "name": "perfmon.exe", "category": "windows", "original_filenames": [ "perfmon.exe" ], "primary": "perfmon.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/perfmon.exe/" }, { "name": "phoneactivate.exe", "category": "windows", "original_filenames": [ "phoneactivate.exe" ], "primary": "phoneactivate.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/phoneactivate.exe/" }, { "name": "photoviewer.dll", "category": "lolbin", "original_filenames": [ "PhotoViewer.dll" ], "primary": "PhotoViewer.dll", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/photoviewer.dll/" }, { "name": "pickerhost.exe", "category": "windows", "original_filenames": [ "PickerHost.exe" ], "primary": "PickerHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pickerhost.exe/" }, { "name": "pinenrollmentbroker.exe", "category": "windows", "original_filenames": [ "PinEnrollmentBroker.exe" ], "primary": "PinEnrollmentBroker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pinenrollmentbroker.exe/" }, { "name": "ping.exe", "category": "windows", "original_filenames": [ "ping.exe" ], "primary": "ping.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ping.exe/" }, { "name": "pipelist.exe", "category": "sysinternals", "original_filenames": [ "pipelist.exe" ], "primary": "pipelist.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pipelist.exe/" }, { "name": "pipelist64.exe", "category": "sysinternals", "original_filenames": [ "pipelist.exe" ], "primary": "pipelist.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pipelist64.exe/" }, { "name": "pkgmgr.exe", "category": "windows", "original_filenames": [ "PkgMgr.exe" ], "primary": "PkgMgr.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pkgmgr.exe/" }, { "name": "pktmon.exe", "category": "lolbin", "original_filenames": [ "PktMon.exe" ], "primary": "PktMon.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pktmon.exe/" }, { "name": "plasrv.exe", "category": "windows", "original_filenames": [ "plasrv.exe" ], "primary": "plasrv.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/plasrv.exe/" }, { "name": "platform_experiences_helper.exe", "category": "windows", "original_filenames": [ "platform_experiences_helper.exe" ], "primary": "platform_experiences_helper.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/platform_experiences_helper.exe/" }, { "name": "pnpunattend.exe", "category": "windows", "original_filenames": [ "PnPUnattend.exe" ], "primary": "PnPUnattend.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pnpunattend.exe/" }, { "name": "pnputil.exe", "category": "lolbin", "original_filenames": [ "pnputil.exe", "PnPutil.exe" ], "primary": "pnputil.exe", "sensor_verified": true, "flags": [ "case-drift" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pnputil.exe/" }, { "name": "poqexec.exe", "category": "windows", "original_filenames": [ "poqexec.exe" ], "primary": "poqexec.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/poqexec.exe/" }, { "name": "portmon.exe", "category": "sysinternals", "original_filenames": [ "Portmon.exe" ], "primary": "Portmon.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/portmon.exe/" }, { "name": "powercfg.exe", "category": "windows", "original_filenames": [ "PowerCfg.exe" ], "primary": "PowerCfg.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/powercfg.exe/" }, { "name": "powershell.exe", "category": "windows", "original_filenames": [ "PowerShell.EXE" ], "primary": "PowerShell.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/powershell.exe/" }, { "name": "powershell_ise.exe", "category": "windows", "original_filenames": [ "powershell_ise.EXE" ], "primary": "powershell_ise.EXE", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/powershell_ise.exe/" }, { "name": "presentationhost.exe", "category": "lolbin", "original_filenames": [ "PresentationHost.exe" ], "primary": "PresentationHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/presentationhost.exe/" }, { "name": "presentationsettings.exe", "category": "windows", "original_filenames": [ "PresentationSettings.exe" ], "primary": "PresentationSettings.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/presentationsettings.exe/" }, { "name": "prevhost.exe", "category": "windows", "original_filenames": [ "PREVHOST.EXE" ], "primary": "PREVHOST.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/prevhost.exe/" }, { "name": "print.exe", "category": "lolbin", "original_filenames": [ "Print.Exe" ], "primary": "Print.Exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/print.exe/" }, { "name": "printbrm.exe", "category": "lolbin", "original_filenames": [ "PrintBrm.exe" ], "primary": "PrintBrm.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/printbrm.exe/" }, { "name": "printbrmui.exe", "category": "windows", "original_filenames": [ "PrintBrmUi.exe" ], "primary": "PrintBrmUi.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/printbrmui.exe/" }, { "name": "printfilterpipelinesvc.exe", "category": "windows", "original_filenames": [ "PrintFilterPipelineSvc.exe" ], "primary": "PrintFilterPipelineSvc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/printfilterpipelinesvc.exe/" }, { "name": "printisolationhost.exe", "category": "windows", "original_filenames": [ "PrintIsolationHost.exe" ], "primary": "PrintIsolationHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/printisolationhost.exe/" }, { "name": "printui.exe", "category": "windows", "original_filenames": [ "printui.exe" ], "primary": "printui.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/printui.exe/" }, { "name": "procdump.exe", "category": "lolbin", "original_filenames": [ "procdump" ], "primary": "procdump", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/procdump.exe/" }, { "name": "procdump64.exe", "category": "sysinternals", "original_filenames": [ "procdump" ], "primary": "procdump", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/procdump64.exe/" }, { "name": "procexp.exe", "category": "sysinternals", "original_filenames": [ "Procexp.exe" ], "primary": "Procexp.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/procexp.exe/" }, { "name": "procexp64.exe", "category": "sysinternals", "original_filenames": [ "Procexp.exe" ], "primary": "Procexp.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/procexp64.exe/" }, { "name": "procmon.exe", "category": "sysinternals", "original_filenames": [ "Process Monitor" ], "primary": "Process Monitor", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/procmon.exe/" }, { "name": "procmon64.exe", "category": "sysinternals", "original_filenames": [ "Process Monitor" ], "primary": "Process Monitor", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/procmon64.exe/" }, { "name": "proquota.exe", "category": "windows", "original_filenames": [ "proquota.exe" ], "primary": "proquota.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/proquota.exe/" }, { "name": "provlaunch.exe", "category": "lolbin", "original_filenames": [ "provlaunch" ], "primary": "provlaunch", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/provlaunch.exe/" }, { "name": "provtool.exe", "category": "windows", "original_filenames": [ "provtool" ], "primary": "provtool", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/provtool.exe/" }, { "name": "proximityuxhost.exe", "category": "windows", "original_filenames": [ "ProximityUxHost.exe" ], "primary": "ProximityUxHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/proximityuxhost.exe/" }, { "name": "prproc.exe", "category": "windows", "original_filenames": [ "PlayReady Process EXE" ], "primary": "PlayReady Process EXE", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/prproc.exe/" }, { "name": "psexec.exe", "category": "sysinternals", "original_filenames": [ "psexec.c" ], "primary": "psexec.c", "sensor_verified": true, "flags": [ "differs-from-name", "shared", "sigma-mismatch" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psexec.exe/" }, { "name": "psexec64.exe", "category": "sysinternals", "original_filenames": [ "psexec.c" ], "primary": "psexec.c", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psexec64.exe/" }, { "name": "psfile.exe", "category": "sysinternals", "original_filenames": [ "psfile.exe" ], "primary": "psfile.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psfile.exe/" }, { "name": "psfile64.exe", "category": "sysinternals", "original_filenames": [ "psfile.exe" ], "primary": "psfile.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psfile64.exe/" }, { "name": "psgetsid.exe", "category": "sysinternals", "original_filenames": [ "PsGetSid.exe" ], "primary": "PsGetSid.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psgetsid.exe/" }, { "name": "psgetsid64.exe", "category": "sysinternals", "original_filenames": [ "PsGetSid.exe" ], "primary": "PsGetSid.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psgetsid64.exe/" }, { "name": "psinfo.exe", "category": "sysinternals", "original_filenames": [ "Psinfo.exe" ], "primary": "Psinfo.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psinfo.exe/" }, { "name": "psinfo64.exe", "category": "sysinternals", "original_filenames": [ "Psinfo.exe" ], "primary": "Psinfo.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psinfo64.exe/" }, { "name": "pskill.exe", "category": "sysinternals", "original_filenames": [ "pskill.exe" ], "primary": "pskill.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pskill.exe/" }, { "name": "pskill64.exe", "category": "sysinternals", "original_filenames": [ "pskill.exe" ], "primary": "pskill.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pskill64.exe/" }, { "name": "pslist.exe", "category": "sysinternals", "original_filenames": [ "pslist.exe" ], "primary": "pslist.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pslist.exe/" }, { "name": "pslist64.exe", "category": "sysinternals", "original_filenames": [ "pslist.exe" ], "primary": "pslist.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pslist64.exe/" }, { "name": "psloggedon.exe", "category": "sysinternals", "original_filenames": [ "psloggedon.exe" ], "primary": "psloggedon.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psloggedon.exe/" }, { "name": "psloggedon64.exe", "category": "sysinternals", "original_filenames": [ "psloggedon.exe" ], "primary": "psloggedon.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psloggedon64.exe/" }, { "name": "psloglist.exe", "category": "sysinternals", "original_filenames": [ "psloglist.exe" ], "primary": "psloglist.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psloglist.exe/" }, { "name": "psloglist64.exe", "category": "sysinternals", "original_filenames": [ "psloglist.exe" ], "primary": "psloglist.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psloglist64.exe/" }, { "name": "pspasswd.exe", "category": "sysinternals", "original_filenames": [ "pspasswd.exe" ], "primary": "pspasswd.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pspasswd.exe/" }, { "name": "pspasswd64.exe", "category": "sysinternals", "original_filenames": [ "pspasswd.exe" ], "primary": "pspasswd.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pspasswd64.exe/" }, { "name": "psping.exe", "category": "sysinternals", "original_filenames": [ "psping.exe" ], "primary": "psping.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psping.exe/" }, { "name": "psping64.exe", "category": "sysinternals", "original_filenames": [ "psping.exe" ], "primary": "psping.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psping64.exe/" }, { "name": "psr.exe", "category": "lolbin", "original_filenames": [ "psr.exe" ], "primary": "psr.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psr.exe/" }, { "name": "psservice.exe", "category": "sysinternals", "original_filenames": [ "psservice.exe" ], "primary": "psservice.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psservice.exe/" }, { "name": "psservice64.exe", "category": "sysinternals", "original_filenames": [ "psservice.exe" ], "primary": "psservice.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psservice64.exe/" }, { "name": "psshutdown.exe", "category": "sysinternals", "original_filenames": [ "psshutdown.exe" ], "primary": "psshutdown.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psshutdown.exe/" }, { "name": "psshutdown64.exe", "category": "sysinternals", "original_filenames": [ "psshutdown.exe" ], "primary": "psshutdown.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/psshutdown64.exe/" }, { "name": "pssuspend.exe", "category": "sysinternals", "original_filenames": [ "pssuspend.exe" ], "primary": "pssuspend.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pssuspend.exe/" }, { "name": "pssuspend64.exe", "category": "sysinternals", "original_filenames": [ "pssuspend.exe" ], "primary": "pssuspend.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pssuspend64.exe/" }, { "name": "pwlauncher.exe", "category": "windows", "original_filenames": [ "pwlauncher.exe" ], "primary": "pwlauncher.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pwlauncher.exe/" }, { "name": "pwsh.dll", "category": "thirdparty", "original_filenames": [ "pwsh.dll" ], "primary": "pwsh.dll", "sensor_verified": false, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pwsh.dll/" }, { "name": "pwsh.exe", "category": "thirdparty", "original_filenames": [ "pwsh.dll" ], "primary": "pwsh.dll", "sensor_verified": true, "flags": [ "apphost", "differs-from-name", "dll-ofn", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/pwsh.exe/" }, { "name": "qappsrv.exe", "category": "windows", "original_filenames": [ "qappsrv.exe" ], "primary": "qappsrv.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/qappsrv.exe/" }, { "name": "qprocess.exe", "category": "windows", "original_filenames": [ "qprocess.exe" ], "primary": "qprocess.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/qprocess.exe/" }, { "name": "query.exe", "category": "lolbin", "original_filenames": [ "query.exe" ], "primary": "query.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/query.exe/" }, { "name": "quser.exe", "category": "windows", "original_filenames": [ "quser.exe" ], "primary": "quser.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/quser.exe/" }, { "name": "qwinsta.exe", "category": "windows", "original_filenames": [ "qwinsta.exe" ], "primary": "qwinsta.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/qwinsta.exe/" }, { "name": "rammap.exe", "category": "sysinternals", "original_filenames": [ "RamMap" ], "primary": "RamMap", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rammap.exe/" }, { "name": "rammap64.exe", "category": "sysinternals", "original_filenames": [ "RamMap" ], "primary": "RamMap", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rammap64.exe/" }, { "name": "rasautou.exe", "category": "lolbin", "original_filenames": [ "rasdlui.exe" ], "primary": "rasdlui.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rasautou.exe/" }, { "name": "rasdial.exe", "category": "windows", "original_filenames": [ "RASDIAL.EXE" ], "primary": "RASDIAL.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rasdial.exe/" }, { "name": "raserver.exe", "category": "windows", "original_filenames": [ "raserver.exe" ], "primary": "raserver.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/raserver.exe/" }, { "name": "rasphone.exe", "category": "windows", "original_filenames": [ "rasphone.exe" ], "primary": "rasphone.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rasphone.exe/" }, { "name": "rdcman-x86.exe", "category": "sysinternals", "original_filenames": [ "RDCMan-x86.dll" ], "primary": "RDCMan-x86.dll", "sensor_verified": true, "flags": [ "differs-from-name", "dll-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rdcman-x86.exe/" }, { "name": "rdcman.exe", "category": "sysinternals", "original_filenames": [ "RDCMan.dll" ], "primary": "RDCMan.dll", "sensor_verified": true, "flags": [ "differs-from-name", "dll-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rdcman.exe/" }, { "name": "rdpclip.exe", "category": "windows", "original_filenames": [ "rdpclip.exe" ], "primary": "rdpclip.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rdpclip.exe/" }, { "name": "rdpinit.exe", "category": "windows", "original_filenames": [ "rdpinit.exe" ], "primary": "rdpinit.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rdpinit.exe/" }, { "name": "rdpinput.exe", "category": "windows", "original_filenames": [ "rdpinput.exe" ], "primary": "rdpinput.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rdpinput.exe/" }, { "name": "rdpsa.exe", "category": "windows", "original_filenames": [ "RdpSa.exe" ], "primary": "RdpSa.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rdpsa.exe/" }, { "name": "rdpsaproxy.exe", "category": "windows", "original_filenames": [ "RdpSaProxy.exe" ], "primary": "RdpSaProxy.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rdpsaproxy.exe/" }, { "name": "rdpsauachelper.exe", "category": "windows", "original_filenames": [ "RdpSaUacHelper.exe" ], "primary": "RdpSaUacHelper.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rdpsauachelper.exe/" }, { "name": "rdpshell.exe", "category": "windows", "original_filenames": [ "rdpshell.exe" ], "primary": "rdpshell.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rdpshell.exe/" }, { "name": "rdpsign.exe", "category": "windows", "original_filenames": [ "TSSignTool.exe" ], "primary": "TSSignTool.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rdpsign.exe/" }, { "name": "rdrleakdiag.exe", "category": "lolbin", "original_filenames": [ "RdrLeakDiag.exe" ], "primary": "RdrLeakDiag.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rdrleakdiag.exe/" }, { "name": "readclouddatasettings.exe", "category": "windows", "original_filenames": [ "readCloudDataSettings.exe" ], "primary": "readCloudDataSettings.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/readclouddatasettings.exe/" }, { "name": "reagentc.exe", "category": "windows", "original_filenames": [ "reagentc.exe" ], "primary": "reagentc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/reagentc.exe/" }, { "name": "recdisc.exe", "category": "windows", "original_filenames": [ "recdisc.exe" ], "primary": "recdisc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/recdisc.exe/" }, { "name": "recover.exe", "category": "windows", "original_filenames": [ "Recover.Exe" ], "primary": "Recover.Exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/recover.exe/" }, { "name": "recoverydrive.exe", "category": "windows", "original_filenames": [ "RECOVERYDRIVE.EXE" ], "primary": "RECOVERYDRIVE.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/recoverydrive.exe/" }, { "name": "refsdedupsvc.exe", "category": "windows", "original_filenames": [ "ReFsDedupSvc.exe" ], "primary": "ReFsDedupSvc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/refsdedupsvc.exe/" }, { "name": "refsutil.exe", "category": "windows", "original_filenames": [ "refsutil.exe" ], "primary": "refsutil.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/refsutil.exe/" }, { "name": "reg.exe", "category": "lolbin", "original_filenames": [ "reg.exe" ], "primary": "reg.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/reg.exe/" }, { "name": "regasm.exe", "category": "lolbin", "original_filenames": [ "RegAsm.exe" ], "primary": "RegAsm.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/regasm.exe/" }, { "name": "regdelnull.exe", "category": "sysinternals", "original_filenames": [ "RegDelNull.exe" ], "primary": "RegDelNull.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/regdelnull.exe/" }, { "name": "regdelnull64.exe", "category": "sysinternals", "original_filenames": [ "RegDelNull.exe" ], "primary": "RegDelNull.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/regdelnull64.exe/" }, { "name": "regedit.exe", "category": "lolbin", "original_filenames": [ "REGEDIT.EXE" ], "primary": "REGEDIT.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/regedit.exe/" }, { "name": "regedt32.exe", "category": "windows", "original_filenames": [ "regedt32.exe" ], "primary": "regedt32.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/regedt32.exe/" }, { "name": "reghide.exe", "category": "sysinternals", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/reghide.exe/" }, { "name": "regini.exe", "category": "lolbin", "original_filenames": [ "REGINI.EXE" ], "primary": "REGINI.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/regini.exe/" }, { "name": "register-cimprovider.exe", "category": "lolbin", "original_filenames": [ "Register-CimProvider2.exe" ], "primary": "Register-CimProvider2.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/register-cimprovider.exe/" }, { "name": "regjump.exe", "category": "sysinternals", "original_filenames": [ "regjump.exe" ], "primary": "regjump.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/regjump.exe/" }, { "name": "regsvcs.exe", "category": "lolbin", "original_filenames": [ "RegSvcs.exe" ], "primary": "RegSvcs.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/regsvcs.exe/" }, { "name": "regsvr32.exe", "category": "lolbin", "original_filenames": [ "REGSVR32.EXE" ], "primary": "REGSVR32.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/regsvr32.exe/" }, { "name": "rekeywiz.exe", "category": "windows", "original_filenames": [ "rekeywiz.exe" ], "primary": "rekeywiz.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rekeywiz.exe/" }, { "name": "relog.exe", "category": "windows", "original_filenames": [ "Relog.exe" ], "primary": "Relog.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/relog.exe/" }, { "name": "relpost.exe", "category": "windows", "original_filenames": [ "RelPost.exe" ], "primary": "RelPost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/relpost.exe/" }, { "name": "remoteposworker.exe", "category": "windows", "original_filenames": [ "RemotePosWorker.exe" ], "primary": "RemotePosWorker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/remoteposworker.exe/" }, { "name": "repadmin.exe", "category": "windows", "original_filenames": [ "repadmin.exe" ], "primary": "repadmin.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/repadmin.exe/" }, { "name": "repair-bde.exe", "category": "windows", "original_filenames": [ "repair-bde.exe" ], "primary": "repair-bde.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/repair-bde.exe/" }, { "name": "replace.exe", "category": "lolbin", "original_filenames": [ "REPLACE.EXE" ], "primary": "REPLACE.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/replace.exe/" }, { "name": "reset.exe", "category": "lolbin", "original_filenames": [ "reset.exe" ], "primary": "reset.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/reset.exe/" }, { "name": "resetengine.exe", "category": "windows", "original_filenames": [ "RESETENGINE.EXE" ], "primary": "RESETENGINE.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/resetengine.exe/" }, { "name": "resmon.exe", "category": "windows", "original_filenames": [ "resmon.exe" ], "primary": "resmon.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/resmon.exe/" }, { "name": "restartagent.exe", "category": "windows", "original_filenames": [ "RestartAgent.exe" ], "primary": "RestartAgent.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/restartagent.exe/" }, { "name": "rgnupdt.exe", "category": "windows", "original_filenames": [ "rgnupdt.exe" ], "primary": "rgnupdt.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rgnupdt.exe/" }, { "name": "rmactivate.exe", "category": "windows", "original_filenames": [ "rmactivate.exe" ], "primary": "rmactivate.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rmactivate.exe/" }, { "name": "rmactivate_isv.exe", "category": "windows", "original_filenames": [ "rmactivate.exe" ], "primary": "rmactivate.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rmactivate_isv.exe/" }, { "name": "rmactivate_ssp.exe", "category": "windows", "original_filenames": [ "rmactivate_ssp.exe" ], "primary": "rmactivate_ssp.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rmactivate_ssp.exe/" }, { "name": "rmactivate_ssp_isv.exe", "category": "windows", "original_filenames": [ "rmactivate_ssp_isv.exe" ], "primary": "rmactivate_ssp_isv.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rmactivate_ssp_isv.exe/" }, { "name": "rmclient.exe", "category": "windows", "original_filenames": [ "RmClient.exe" ], "primary": "RmClient.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rmclient.exe/" }, { "name": "rmttpmvscmgrsvr.exe", "category": "windows", "original_filenames": [ "RmtTpmVscMgrSvr.exe" ], "primary": "RmtTpmVscMgrSvr.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rmttpmvscmgrsvr.exe/" }, { "name": "robocopy.exe", "category": "windows", "original_filenames": [ "robocopy.exe" ], "primary": "robocopy.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/robocopy.exe/" }, { "name": "rootkitrevealer.exe", "category": "sysinternals", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rootkitrevealer.exe/" }, { "name": "route.exe", "category": "windows", "original_filenames": [ "route.exe" ], "primary": "route.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/route.exe/" }, { "name": "rpcping.exe", "category": "lolbin", "original_filenames": [ "RpcPing.exe" ], "primary": "RpcPing.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rpcping.exe/" }, { "name": "rrinstaller.exe", "category": "windows", "original_filenames": [ "rrinstaller.exe" ], "primary": "rrinstaller.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rrinstaller.exe/" }, { "name": "rstrui.exe", "category": "windows", "original_filenames": [ "rstrui.exe" ], "primary": "rstrui.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rstrui.exe/" }, { "name": "ru.exe", "category": "sysinternals", "original_filenames": [ "Regsize1" ], "primary": "Regsize1", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ru.exe/" }, { "name": "ru64.exe", "category": "sysinternals", "original_filenames": [ "Regsize1" ], "primary": "Regsize1", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ru64.exe/" }, { "name": "runas.exe", "category": "windows", "original_filenames": [ "RUNAS.EXE" ], "primary": "RUNAS.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/runas.exe/" }, { "name": "rundll32.exe", "category": "lolbin", "original_filenames": [ "RUNDLL32.EXE" ], "primary": "RUNDLL32.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rundll32.exe/" }, { "name": "runexehelper.exe", "category": "lolbin", "original_filenames": [ null, "RunExeHelper.exe" ], "primary": "RunExeHelper.exe", "sensor_verified": true, "flags": [ "partial-no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/runexehelper.exe/" }, { "name": "runlegacycplelevated.exe", "category": "windows", "original_filenames": [ "RunLegacyCPLElevated.EXE" ], "primary": "RunLegacyCPLElevated.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/runlegacycplelevated.exe/" }, { "name": "runonce.exe", "category": "lolbin", "original_filenames": [ "RUNONCE.EXE" ], "primary": "RUNONCE.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/runonce.exe/" }, { "name": "runscripthelper.exe", "category": "lolbin", "original_filenames": [ "runscripthelper.exe" ], "primary": "runscripthelper.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/runscripthelper.exe/" }, { "name": "runtimebroker.exe", "category": "windows", "original_filenames": [ "RuntimeBroker.exe" ], "primary": "RuntimeBroker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/runtimebroker.exe/" }, { "name": "ruximics.exe", "category": "windows", "original_filenames": [ "RUXIMICS.exe" ], "primary": "RUXIMICS.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ruximics.exe/" }, { "name": "ruximih.exe", "category": "windows", "original_filenames": [ "RUXIMIH.exe" ], "primary": "RUXIMIH.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ruximih.exe/" }, { "name": "rwinsta.exe", "category": "windows", "original_filenames": [ "rwinsta.exe" ], "primary": "rwinsta.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/rwinsta.exe/" }, { "name": "sbupdateworker.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sbupdateworker.exe/" }, { "name": "sc.exe", "category": "lolbin", "original_filenames": [ "sc.exe" ], "primary": "sc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sc.exe/" }, { "name": "schtasks.exe", "category": "lolbin", "original_filenames": [ "schtasks.exe", "sctasks.exe" ], "primary": "schtasks.exe", "sensor_verified": true, "flags": [ "drift" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/schtasks.exe/" }, { "name": "scp.exe", "category": "lolbin", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/scp.exe/" }, { "name": "scrcons.exe", "category": "windows", "original_filenames": [ "ScrCons" ], "primary": "ScrCons", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/scrcons.exe/" }, { "name": "scriptrunner.exe", "category": "lolbin", "original_filenames": [ "ScriptRunner.exe" ], "primary": "ScriptRunner.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/scriptrunner.exe/" }, { "name": "scrobj.dll", "category": "lolbin", "original_filenames": [ "scrobj.dll" ], "primary": "scrobj.dll", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/scrobj.dll/" }, { "name": "sdbinst.exe", "category": "windows", "original_filenames": [ "sdbinst.exe" ], "primary": "sdbinst.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sdbinst.exe/" }, { "name": "sdchange.exe", "category": "windows", "original_filenames": [ "sdchange.exe" ], "primary": "sdchange.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sdchange.exe/" }, { "name": "sdclt.exe", "category": "windows", "original_filenames": [ "sdclt.exe" ], "primary": "sdclt.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sdclt.exe/" }, { "name": "sdelete.exe", "category": "sysinternals", "original_filenames": [ "sdelete.exe" ], "primary": "sdelete.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sdelete.exe/" }, { "name": "sdelete64.exe", "category": "sysinternals", "original_filenames": [ "sdelete.exe" ], "primary": "sdelete.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sdelete64.exe/" }, { "name": "sdiagnhost.exe", "category": "windows", "original_filenames": [ "sdiagnhost.exe" ], "primary": "sdiagnhost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sdiagnhost.exe/" }, { "name": "searchfilterhost.exe", "category": "windows", "original_filenames": [ "SearchFilterHost.exe" ], "primary": "SearchFilterHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/searchfilterhost.exe/" }, { "name": "searchindexer.exe", "category": "windows", "original_filenames": [ "SearchIndexer.exe" ], "primary": "SearchIndexer.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/searchindexer.exe/" }, { "name": "searchprotocolhost.exe", "category": "windows", "original_filenames": [ "SearchProtocolHost.exe" ], "primary": "SearchProtocolHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/searchprotocolhost.exe/" }, { "name": "secedit.exe", "category": "windows", "original_filenames": [ "SeCEdit" ], "primary": "SeCEdit", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/secedit.exe/" }, { "name": "secinit.exe", "category": "windows", "original_filenames": [ "secinit" ], "primary": "secinit", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/secinit.exe/" }, { "name": "securekernel.exe", "category": "windows", "original_filenames": [ "securekernel.exe" ], "primary": "securekernel.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/securekernel.exe/" }, { "name": "securityhealthhost.exe", "category": "windows", "original_filenames": [ "SecurityHealthHost.exe" ], "primary": "SecurityHealthHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/securityhealthhost.exe/" }, { "name": "securityhealthservice.exe", "category": "windows", "original_filenames": [ "SecurityHealthService.exe" ], "primary": "SecurityHealthService.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/securityhealthservice.exe/" }, { "name": "securityhealthsystray.exe", "category": "windows", "original_filenames": [ "SecurityHealthSystray.exe" ], "primary": "SecurityHealthSystray.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/securityhealthsystray.exe/" }, { "name": "sensordataservice.exe", "category": "windows", "original_filenames": [ "SensorDataService.exe" ], "primary": "SensorDataService.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sensordataservice.exe/" }, { "name": "sensorruntimebroker.exe", "category": "windows", "original_filenames": [ "SensorRuntimeBroker.exe" ], "primary": "SensorRuntimeBroker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sensorruntimebroker.exe/" }, { "name": "servicemodelreg.exe", "category": "windows", "original_filenames": [ "ServiceModelReg.exe" ], "primary": "ServiceModelReg.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/servicemodelreg.exe/" }, { "name": "services.exe", "category": "windows", "original_filenames": [ "services.exe" ], "primary": "services.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/services.exe/" }, { "name": "sessionmsg.exe", "category": "windows", "original_filenames": [ "SessionMsg.exe" ], "primary": "SessionMsg.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sessionmsg.exe/" }, { "name": "sethc.exe", "category": "windows", "original_filenames": [ "sethc.exe" ], "primary": "sethc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sethc.exe/" }, { "name": "setspn.exe", "category": "windows", "original_filenames": [ "setspn.exe" ], "primary": "setspn.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/setspn.exe/" }, { "name": "settingsynchost.exe", "category": "lolbin", "original_filenames": [ "SettingSyncHost.exe" ], "primary": "SettingSyncHost.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/settingsynchost.exe/" }, { "name": "setup.exe", "category": "windows", "original_filenames": [ "SETUP.EXE", null, "isetup.exe" ], "primary": "SETUP.EXE", "sensor_verified": true, "flags": [ "drift", "partial-no-ofn", "rmm-name-collision", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/setup.exe/" }, { "name": "setup16.exe", "category": "windows", "original_filenames": [ "SETUP.EXE" ], "primary": "SETUP.EXE", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/setup16.exe/" }, { "name": "setupapi.dll", "category": "lolbin", "original_filenames": [ "SETUPAPI.DLL", "setupapi.dll" ], "primary": "SETUPAPI.DLL", "sensor_verified": false, "flags": [ "case-drift" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/setupapi.dll/" }, { "name": "setupcl.exe", "category": "windows", "original_filenames": [ "Setupcl.EXE" ], "primary": "Setupcl.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/setupcl.exe/" }, { "name": "setupugc.exe", "category": "lolbin", "original_filenames": [ "SETUPUGC.EXE" ], "primary": "SETUPUGC.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/setupugc.exe/" }, { "name": "setx.exe", "category": "windows", "original_filenames": [ "setx.exe" ], "primary": "setx.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/setx.exe/" }, { "name": "sfc.exe", "category": "windows", "original_filenames": [ "sfc.exe" ], "primary": "sfc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sfc.exe/" }, { "name": "sftp.exe", "category": "lolbin", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sftp.exe/" }, { "name": "shareenum.exe", "category": "sysinternals", "original_filenames": [ "ShareEnum" ], "primary": "ShareEnum", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/shareenum.exe/" }, { "name": "shareenum64.exe", "category": "sysinternals", "original_filenames": [ "ShareEnum" ], "primary": "ShareEnum", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/shareenum64.exe/" }, { "name": "shdocvw.dll", "category": "lolbin", "original_filenames": [ "SHDOCVW.DLL" ], "primary": "SHDOCVW.DLL", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/shdocvw.dll/" }, { "name": "shell32.dll", "category": "lolbin", "original_filenames": [ "SHELL32.DLL", "shell32.dll" ], "primary": "SHELL32.DLL", "sensor_verified": false, "flags": [ "case-drift" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/shell32.dll/" }, { "name": "shellappruntime.exe", "category": "windows", "original_filenames": [ "ShellAppRuntime.exe" ], "primary": "ShellAppRuntime.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/shellappruntime.exe/" }, { "name": "shellhost.exe", "category": "windows", "original_filenames": [ "ShellHost.exe" ], "primary": "ShellHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/shellhost.exe/" }, { "name": "shellrunas.exe", "category": "sysinternals", "original_filenames": [ "ShellRunas" ], "primary": "ShellRunas", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/shellrunas.exe/" }, { "name": "shimgvw.dll", "category": "lolbin", "original_filenames": [ "shimgvw.dll" ], "primary": "shimgvw.dll", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/shimgvw.dll/" }, { "name": "shrpubw.exe", "category": "windows", "original_filenames": [ "shrpubw.exe" ], "primary": "shrpubw.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/shrpubw.exe/" }, { "name": "shutdown.exe", "category": "windows", "original_filenames": [ "SHUTDOWN.EXE" ], "primary": "SHUTDOWN.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/shutdown.exe/" }, { "name": "sigcheck.exe", "category": "sysinternals", "original_filenames": [ "sigcheck.exe" ], "primary": "sigcheck.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sigcheck.exe/" }, { "name": "sigcheck64.exe", "category": "sysinternals", "original_filenames": [ "sigcheck.exe" ], "primary": "sigcheck.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sigcheck64.exe/" }, { "name": "sigverif.exe", "category": "lolbin", "original_filenames": [ "sigverif.exe" ], "primary": "sigverif.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sigverif.exe/" }, { "name": "sihclient.exe", "category": "windows", "original_filenames": [ "sihclient.exe" ], "primary": "sihclient.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sihclient.exe/" }, { "name": "sihost.exe", "category": "windows", "original_filenames": [ "sihost.exe" ], "primary": "sihost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sihost.exe/" }, { "name": "slidetoshutdown.exe", "category": "windows", "original_filenames": [ "SlideToShutDown.exe" ], "primary": "SlideToShutDown.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/slidetoshutdown.exe/" }, { "name": "slui.exe", "category": "windows", "original_filenames": [ "slui.exe" ], "primary": "slui.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/slui.exe/" }, { "name": "smartscreen.exe", "category": "windows", "original_filenames": [ "smartscreen.exe" ], "primary": "smartscreen.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/smartscreen.exe/" }, { "name": "smss.exe", "category": "windows", "original_filenames": [ "smss.exe" ], "primary": "smss.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/smss.exe/" }, { "name": "smsvchost.exe", "category": "windows", "original_filenames": [ "SMSvcHost.exe" ], "primary": "SMSvcHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/smsvchost.exe/" }, { "name": "sndvol.exe", "category": "windows", "original_filenames": [ "SndVol.exe" ], "primary": "SndVol.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sndvol.exe/" }, { "name": "snippingtool.exe", "category": "windows", "original_filenames": [ "SnippingTool.exe" ], "primary": "SnippingTool.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/snippingtool.exe/" }, { "name": "snmptrap.exe", "category": "windows", "original_filenames": [ "snmptrap.exe" ], "primary": "snmptrap.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/snmptrap.exe/" }, { "name": "sort.exe", "category": "windows", "original_filenames": [ "Sort.EXE" ], "primary": "Sort.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sort.exe/" }, { "name": "spaceagent.exe", "category": "windows", "original_filenames": [ "SpaceAgent.exe" ], "primary": "SpaceAgent.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/spaceagent.exe/" }, { "name": "spaceman.exe", "category": "windows", "original_filenames": [ "spaceman.exe" ], "primary": "spaceman.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/spaceman.exe/" }, { "name": "spaceutil.exe", "category": "windows", "original_filenames": [ "spaceutil.exe" ], "primary": "spaceutil.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/spaceutil.exe/" }, { "name": "spatialaudiolicensesrv.exe", "category": "windows", "original_filenames": [ "SpatialLicenseSrv.exe" ], "primary": "SpatialLicenseSrv.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/spatialaudiolicensesrv.exe/" }, { "name": "speechmodeldownload.exe", "category": "windows", "original_filenames": [ "SpeechModelDownload.exe" ], "primary": "SpeechModelDownload.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/speechmodeldownload.exe/" }, { "name": "speechruntime.exe", "category": "windows", "original_filenames": [ "SpeechRuntime.exe" ], "primary": "SpeechRuntime.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/speechruntime.exe/" }, { "name": "speechuxwiz.exe", "category": "windows", "original_filenames": [ "SpeechUXWiz.exe" ], "primary": "SpeechUXWiz.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/speechuxwiz.exe/" }, { "name": "splwow64.exe", "category": "windows", "original_filenames": [ "splwow64.exe" ], "primary": "splwow64.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/splwow64.exe/" }, { "name": "spoolsv.exe", "category": "windows", "original_filenames": [ "spoolsv.exe" ], "primary": "spoolsv.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/spoolsv.exe/" }, { "name": "spoolsvworker.exe", "category": "windows", "original_filenames": [ "spoolsvworker.exe" ], "primary": "spoolsvworker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/spoolsvworker.exe/" }, { "name": "sppextcomobj.exe", "category": "windows", "original_filenames": [ "SppExtComObj.exe" ], "primary": "SppExtComObj.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sppextcomobj.exe/" }, { "name": "sppsvc.exe", "category": "windows", "original_filenames": [ "sppsvc.exe" ], "primary": "sppsvc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sppsvc.exe/" }, { "name": "sqldumper.exe", "category": "lolbin", "original_filenames": [ "SqlDumper.exe" ], "primary": "SqlDumper.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sqldumper.exe/" }, { "name": "sqlservr.exe", "category": "windows", "original_filenames": [ "SQLSERVR.EXE" ], "primary": "SQLSERVR.EXE", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sqlservr.exe/" }, { "name": "sqlwriter.exe", "category": "windows", "original_filenames": [ "SQLWRITER.EXE" ], "primary": "SQLWRITER.EXE", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sqlwriter.exe/" }, { "name": "srdelayed.exe", "category": "windows", "original_filenames": [ "srdelayed.exe" ], "primary": "srdelayed.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/srdelayed.exe/" }, { "name": "srtasks.exe", "category": "windows", "original_filenames": [ "srtasks.exe" ], "primary": "srtasks.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/srtasks.exe/" }, { "name": "ssh-add.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ssh-add.exe/" }, { "name": "ssh-agent.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ssh-agent.exe/" }, { "name": "ssh-keygen.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ssh-keygen.exe/" }, { "name": "ssh-keyscan.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ssh-keyscan.exe/" }, { "name": "ssh-pkcs11-helper.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ssh-pkcs11-helper.exe/" }, { "name": "ssh-shellhost.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ssh-shellhost.exe/" }, { "name": "ssh-sk-helper.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ssh-sk-helper.exe/" }, { "name": "ssh.exe", "category": "lolbin", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ssh.exe/" }, { "name": "stordiag.exe", "category": "lolbin", "original_filenames": [ "stordiag.exe" ], "primary": "stordiag.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/stordiag.exe/" }, { "name": "streams.exe", "category": "sysinternals", "original_filenames": [ "streams.exe" ], "primary": "streams.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/streams.exe/" }, { "name": "streams64.exe", "category": "sysinternals", "original_filenames": [ "streams.exe" ], "primary": "streams.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/streams64.exe/" }, { "name": "strings.exe", "category": "sysinternals", "original_filenames": [ "strings.exe" ], "primary": "strings.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/strings.exe/" }, { "name": "strings64.exe", "category": "sysinternals", "original_filenames": [ "strings.exe" ], "primary": "strings.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/strings64.exe/" }, { "name": "subst.exe", "category": "windows", "original_filenames": [ "Subst.Exe" ], "primary": "Subst.Exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/subst.exe/" }, { "name": "sudo.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sudo.exe/" }, { "name": "svchost.exe", "category": "windows", "original_filenames": [ "svchost.exe" ], "primary": "svchost.exe", "sensor_verified": true, "flags": [ "rmm-name-collision" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/svchost.exe/" }, { "name": "sxstrace.exe", "category": "windows", "original_filenames": [ "sxstrace.exe" ], "primary": "sxstrace.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sxstrace.exe/" }, { "name": "sync.exe", "category": "sysinternals", "original_filenames": [ "Sync.exe" ], "primary": "Sync.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sync.exe/" }, { "name": "sync64.exe", "category": "sysinternals", "original_filenames": [ "Sync.exe" ], "primary": "Sync.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sync64.exe/" }, { "name": "syncappvpublishingserver.exe", "category": "lolbin", "original_filenames": [ "syncappvpublishingserver.exe", null, "SyncAppvPublishingServer.exe" ], "primary": "syncappvpublishingserver.exe", "sensor_verified": true, "flags": [ "case-drift", "partial-no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/syncappvpublishingserver.exe/" }, { "name": "synchost.exe", "category": "windows", "original_filenames": [ "SyncHost.EXE" ], "primary": "SyncHost.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/synchost.exe/" }, { "name": "sysmon.exe", "category": "sysinternals", "original_filenames": [ "sysmon.exe", null ], "primary": "sysmon.exe", "sensor_verified": true, "flags": [ "partial-no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sysmon.exe/" }, { "name": "sysmon64.exe", "category": "sysinternals", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sysmon64.exe/" }, { "name": "sysprep.exe", "category": "windows", "original_filenames": [ "sysprep.EXE" ], "primary": "sysprep.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sysprep.exe/" }, { "name": "sysreseterr.exe", "category": "windows", "original_filenames": [ "SysResetErr.exe" ], "primary": "SysResetErr.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/sysreseterr.exe/" }, { "name": "syssetup.dll", "category": "lolbin", "original_filenames": [ "SYSSETUP.DLL" ], "primary": "SYSSETUP.DLL", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/syssetup.dll/" }, { "name": "systeminfo.exe", "category": "windows", "original_filenames": [ "sysinfo.exe" ], "primary": "sysinfo.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/systeminfo.exe/" }, { "name": "systempropertiesadvanced.exe", "category": "windows", "original_filenames": [ "SystemPropertiesAdvanced.EXE" ], "primary": "SystemPropertiesAdvanced.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/systempropertiesadvanced.exe/" }, { "name": "systempropertiescomputername.exe", "category": "windows", "original_filenames": [ "SystemPropertiesComputerName.EXE" ], "primary": "SystemPropertiesComputerName.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/systempropertiescomputername.exe/" }, { "name": "systempropertiesdataexecutionprevention.exe", "category": "windows", "original_filenames": [ "SystemPropertiesDataExecutionPrevention.EXE" ], "primary": "SystemPropertiesDataExecutionPrevention.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/systempropertiesdataexecutionprevention.exe/" }, { "name": "systempropertieshardware.exe", "category": "windows", "original_filenames": [ "SystemPropertiesHardware.EXE" ], "primary": "SystemPropertiesHardware.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/systempropertieshardware.exe/" }, { "name": "systempropertiesperformance.exe", "category": "windows", "original_filenames": [ "SystemPropertiesPerformance.EXE" ], "primary": "SystemPropertiesPerformance.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/systempropertiesperformance.exe/" }, { "name": "systempropertiesprotection.exe", "category": "windows", "original_filenames": [ "SSystemPropertiesProtection.EXE" ], "primary": "SSystemPropertiesProtection.EXE", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/systempropertiesprotection.exe/" }, { "name": "systempropertiesremote.exe", "category": "windows", "original_filenames": [ "SystemPropertiesRemote.EXE" ], "primary": "SystemPropertiesRemote.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/systempropertiesremote.exe/" }, { "name": "systemsettingsadminflows.exe", "category": "windows", "original_filenames": [ "SystemSettingsAdminFlows.EXE" ], "primary": "SystemSettingsAdminFlows.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/systemsettingsadminflows.exe/" }, { "name": "systemsettingsbroker.exe", "category": "windows", "original_filenames": [ "SystemSettingsBroker.exe" ], "primary": "SystemSettingsBroker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/systemsettingsbroker.exe/" }, { "name": "systemsettingsremovedevice.exe", "category": "windows", "original_filenames": [ "SystemSettingsRemoveDevice.exe" ], "primary": "SystemSettingsRemoveDevice.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/systemsettingsremovedevice.exe/" }, { "name": "systemuwplauncher.exe", "category": "windows", "original_filenames": [ "SystemUWPLauncher.exe" ], "primary": "SystemUWPLauncher.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/systemuwplauncher.exe/" }, { "name": "systray.exe", "category": "windows", "original_filenames": [ "systray.exe" ], "primary": "systray.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/systray.exe/" }, { "name": "tabcal.exe", "category": "windows", "original_filenames": [ "tabcal.exe" ], "primary": "tabcal.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tabcal.exe/" }, { "name": "takeown.exe", "category": "windows", "original_filenames": [ "takeown.exe" ], "primary": "takeown.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/takeown.exe/" }, { "name": "tapiunattend.exe", "category": "windows", "original_filenames": [ "TapiUnattend.exe" ], "primary": "TapiUnattend.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tapiunattend.exe/" }, { "name": "tar.exe", "category": "lolbin", "original_filenames": [ "bsdtar" ], "primary": "bsdtar", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tar.exe/" }, { "name": "taskhostw.exe", "category": "windows", "original_filenames": [ "taskhostw.exe" ], "primary": "taskhostw.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/taskhostw.exe/" }, { "name": "taskkill.exe", "category": "windows", "original_filenames": [ "taskkill.exe" ], "primary": "taskkill.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/taskkill.exe/" }, { "name": "tasklist.exe", "category": "windows", "original_filenames": [ "tasklist.exe" ], "primary": "tasklist.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tasklist.exe/" }, { "name": "taskmgr.exe", "category": "windows", "original_filenames": [ "Taskmgr.exe", null, "taskmgr.exe" ], "primary": "Taskmgr.exe", "sensor_verified": true, "flags": [ "case-drift", "partial-no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/taskmgr.exe/" }, { "name": "tcblaunch.exe", "category": "windows", "original_filenames": [ "tcblaunch.exe" ], "primary": "tcblaunch.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tcblaunch.exe/" }, { "name": "tcmsetup.exe", "category": "windows", "original_filenames": [ "TCMSETUP.EXE" ], "primary": "TCMSETUP.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tcmsetup.exe/" }, { "name": "tcpsvcs.exe", "category": "windows", "original_filenames": [ "TCPSVCS.EXE" ], "primary": "TCPSVCS.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tcpsvcs.exe/" }, { "name": "tcpvcon.exe", "category": "sysinternals", "original_filenames": [ "Tcpvcon.exe" ], "primary": "Tcpvcon.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tcpvcon.exe/" }, { "name": "tcpvcon64.exe", "category": "sysinternals", "original_filenames": [ "Tcpvcon.exe" ], "primary": "Tcpvcon.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tcpvcon64.exe/" }, { "name": "tcpview.exe", "category": "sysinternals", "original_filenames": [ "TcpView.exe" ], "primary": "TcpView.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tcpview.exe/" }, { "name": "tcpview64.exe", "category": "sysinternals", "original_filenames": [ "TcpView.exe" ], "primary": "TcpView.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tcpview64.exe/" }, { "name": "testlimit.exe", "category": "sysinternals", "original_filenames": [ "Testlimit" ], "primary": "Testlimit", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/testlimit.exe/" }, { "name": "testlimit64.exe", "category": "sysinternals", "original_filenames": [ "Testlimit" ], "primary": "Testlimit", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/testlimit64.exe/" }, { "name": "thumbnailextractionhost.exe", "category": "windows", "original_filenames": [ "ThumbnailExtractionHost.EXE" ], "primary": "ThumbnailExtractionHost.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/thumbnailextractionhost.exe/" }, { "name": "tieringengineservice.exe", "category": "windows", "original_filenames": [ "TieringEngineService.exe" ], "primary": "TieringEngineService.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tieringengineservice.exe/" }, { "name": "timeout.exe", "category": "windows", "original_filenames": [ "timeout.exe" ], "primary": "timeout.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/timeout.exe/" }, { "name": "tiworker.exe", "category": "windows", "original_filenames": [ "TiWorker.exe" ], "primary": "TiWorker.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tiworker.exe/" }, { "name": "tokenbrokercookies.exe", "category": "windows", "original_filenames": [ "TokenBrokerCookies.exe" ], "primary": "TokenBrokerCookies.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tokenbrokercookies.exe/" }, { "name": "tpminit.exe", "category": "windows", "original_filenames": [ "TpmInit.EXE" ], "primary": "TpmInit.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tpminit.exe/" }, { "name": "tpmtool.exe", "category": "windows", "original_filenames": [ "tpmtool.exe" ], "primary": "tpmtool.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tpmtool.exe/" }, { "name": "tpmvscmgr.exe", "category": "windows", "original_filenames": [ "TpmVscMgr.exe" ], "primary": "TpmVscMgr.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tpmvscmgr.exe/" }, { "name": "tpmvscmgrsvr.exe", "category": "windows", "original_filenames": [ "TpmVscMgrSvr.exe" ], "primary": "TpmVscMgrSvr.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tpmvscmgrsvr.exe/" }, { "name": "tracerpt.exe", "category": "windows", "original_filenames": [ "TraceRpt.Exe" ], "primary": "TraceRpt.Exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tracerpt.exe/" }, { "name": "tracert.exe", "category": "windows", "original_filenames": [ "tracert.exe" ], "primary": "tracert.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tracert.exe/" }, { "name": "tree.com", "category": "windows", "original_filenames": [ "TREE.COM" ], "primary": "TREE.COM", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tree.com/" }, { "name": "trustedinstaller.exe", "category": "windows", "original_filenames": [ "TrustedInstaller.exe" ], "primary": "TrustedInstaller.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/trustedinstaller.exe/" }, { "name": "tscon.exe", "category": "windows", "original_filenames": [ "tscon.exe" ], "primary": "tscon.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tscon.exe/" }, { "name": "tsdiscon.exe", "category": "windows", "original_filenames": [ "tsdiscon.exe" ], "primary": "tsdiscon.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tsdiscon.exe/" }, { "name": "tskill.exe", "category": "windows", "original_filenames": [ "tskill.exe" ], "primary": "tskill.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tskill.exe/" }, { "name": "tssdis.exe", "category": "windows", "original_filenames": [ "tssdis.exe" ], "primary": "tssdis.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tssdis.exe/" }, { "name": "tstheme.exe", "category": "windows", "original_filenames": [ "TSThemeS.exe" ], "primary": "TSThemeS.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tstheme.exe/" }, { "name": "tswbprxy.exe", "category": "windows", "original_filenames": [ "TSWbPrxy.exe" ], "primary": "TSWbPrxy.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tswbprxy.exe/" }, { "name": "ttdinject.exe", "category": "lolbin", "original_filenames": [ "TTDInject.EXE" ], "primary": "TTDInject.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ttdinject.exe/" }, { "name": "tttracer.exe", "category": "lolbin", "original_filenames": [ "TTTracer.exe" ], "primary": "TTTracer.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tttracer.exe/" }, { "name": "typeperf.exe", "category": "windows", "original_filenames": [ "TypePerf.exe" ], "primary": "TypePerf.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/typeperf.exe/" }, { "name": "tzsync.exe", "category": "windows", "original_filenames": [ "tzsync.exe" ], "primary": "tzsync.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tzsync.exe/" }, { "name": "tzutil.exe", "category": "windows", "original_filenames": [ "tzutil.exe" ], "primary": "tzutil.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/tzutil.exe/" }, { "name": "ucconfigtask.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ucconfigtask.exe/" }, { "name": "ucpdmgr.exe", "category": "windows", "original_filenames": [ "UCPDMgr.exe" ], "primary": "UCPDMgr.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ucpdmgr.exe/" }, { "name": "ucsvc.exe", "category": "windows", "original_filenames": [ "bfsvc.exe" ], "primary": "bfsvc.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/ucsvc.exe/" }, { "name": "uevagentpolicygenerator.exe", "category": "windows", "original_filenames": [ "UevAgentPolicyGenerator.exe" ], "primary": "UevAgentPolicyGenerator.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/uevagentpolicygenerator.exe/" }, { "name": "uevappmonitor.exe", "category": "windows", "original_filenames": [ "UevAppMonitor.exe" ], "primary": "UevAppMonitor.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/uevappmonitor.exe/" }, { "name": "uevtemplatebaselinegenerator.exe", "category": "windows", "original_filenames": [ "UevTemplateBaselineGenerator.exe" ], "primary": "UevTemplateBaselineGenerator.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/uevtemplatebaselinegenerator.exe/" }, { "name": "uevtemplateconfigitemgenerator.exe", "category": "windows", "original_filenames": [ "UevTemplateConfigItemGenerator.exe" ], "primary": "UevTemplateConfigItemGenerator.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/uevtemplateconfigitemgenerator.exe/" }, { "name": "uieorchestratorstub.exe", "category": "windows", "original_filenames": [ "UIEOrchestratorStub" ], "primary": "UIEOrchestratorStub", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/uieorchestratorstub.exe/" }, { "name": "uimgrbroker.exe", "category": "windows", "original_filenames": [ "UIMgrBroker.exe" ], "primary": "UIMgrBroker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/uimgrbroker.exe/" }, { "name": "unlodctr.exe", "category": "windows", "original_filenames": [ "UNLODCTR.EXE" ], "primary": "UNLODCTR.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/unlodctr.exe/" }, { "name": "unregmp2.exe", "category": "lolbin", "original_filenames": [ "unregmp2.exe" ], "primary": "unregmp2.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/unregmp2.exe/" }, { "name": "unsecapp.exe", "category": "windows", "original_filenames": [ "unsecapp.dll" ], "primary": "unsecapp.dll", "sensor_verified": true, "flags": [ "differs-from-name", "dll-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/unsecapp.exe/" }, { "name": "updatecli.exe", "category": "windows", "original_filenames": [ "updatecli" ], "primary": "updatecli", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/updatecli.exe/" }, { "name": "upfc.exe", "category": "windows", "original_filenames": [ "upfc.exe" ], "primary": "upfc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/upfc.exe/" }, { "name": "upgraderesultsui.exe", "category": "windows", "original_filenames": [ "UpgradeResultsUI.exe" ], "primary": "UpgradeResultsUI.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/upgraderesultsui.exe/" }, { "name": "upnpcont.exe", "category": "windows", "original_filenames": [ "upnpcont.dll" ], "primary": "upnpcont.dll", "sensor_verified": true, "flags": [ "differs-from-name", "dll-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/upnpcont.exe/" }, { "name": "upprinterinstaller.exe", "category": "windows", "original_filenames": [ "UPPrinterInstaller.exe" ], "primary": "UPPrinterInstaller.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/upprinterinstaller.exe/" }, { "name": "url.dll", "category": "lolbin", "original_filenames": [ "URL.DLL" ], "primary": "URL.DLL", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/url.dll/" }, { "name": "user.exe", "category": "windows", "original_filenames": [ "User.exe" ], "primary": "User.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/user.exe/" }, { "name": "useraccountbroker.exe", "category": "windows", "original_filenames": [ "UserAccountBroker.exe" ], "primary": "UserAccountBroker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/useraccountbroker.exe/" }, { "name": "useraccountcontrolsettings.exe", "category": "windows", "original_filenames": [ "UserAccountControlSettings.exe" ], "primary": "UserAccountControlSettings.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/useraccountcontrolsettings.exe/" }, { "name": "userdatasource.exe", "category": "windows", "original_filenames": [ "UserDataSource.exe" ], "primary": "UserDataSource.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/userdatasource.exe/" }, { "name": "userinit.exe", "category": "windows", "original_filenames": [ "USERINIT.EXE" ], "primary": "USERINIT.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/userinit.exe/" }, { "name": "useroobebroker.exe", "category": "windows", "original_filenames": [ "UserOOBEBroker.exe" ], "primary": "UserOOBEBroker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/useroobebroker.exe/" }, { "name": "usoclient.exe", "category": "windows", "original_filenames": [ "UsoClient" ], "primary": "UsoClient", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/usoclient.exe/" }, { "name": "utcdecoderhost.exe", "category": "windows", "original_filenames": [ "UtcDecoderHost.exe" ], "primary": "UtcDecoderHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/utcdecoderhost.exe/" }, { "name": "utilitysessionminlogon.exe", "category": "windows", "original_filenames": [ "UtilitySessionMinLogon.exe" ], "primary": "UtilitySessionMinLogon.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/utilitysessionminlogon.exe/" }, { "name": "utilman.exe", "category": "windows", "original_filenames": [ "utilman2.exe" ], "primary": "utilman2.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/utilman.exe/" }, { "name": "vaultcmd.exe", "category": "windows", "original_filenames": [ "VAULTCMD.EXE" ], "primary": "VAULTCMD.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vaultcmd.exe/" }, { "name": "vbc.exe", "category": "lolbin", "original_filenames": [ "vbc.exe" ], "primary": "vbc.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vbc.exe/" }, { "name": "vds.exe", "category": "windows", "original_filenames": [ "vds.exe" ], "primary": "vds.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vds.exe/" }, { "name": "vdsldr.exe", "category": "windows", "original_filenames": [ "vdsldr.exe" ], "primary": "vdsldr.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vdsldr.exe/" }, { "name": "verclsid.exe", "category": "lolbin", "original_filenames": [ "verclsid.exe" ], "primary": "verclsid.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/verclsid.exe/" }, { "name": "verifier.exe", "category": "windows", "original_filenames": [ "verifier.exe" ], "primary": "verifier.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/verifier.exe/" }, { "name": "verifiergui.exe", "category": "windows", "original_filenames": [ "verifiergui.exe" ], "primary": "verifiergui.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/verifiergui.exe/" }, { "name": "vfpctrl.exe", "category": "windows", "original_filenames": [ "vfpctrl.exe" ], "primary": "vfpctrl.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vfpctrl.exe/" }, { "name": "vmcompute.exe", "category": "windows", "original_filenames": [ "vmcompute.exe" ], "primary": "vmcompute.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vmcompute.exe/" }, { "name": "vmcomputeagent.exe", "category": "windows", "original_filenames": [ "VmComputeAgent.exe" ], "primary": "VmComputeAgent.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vmcomputeagent.exe/" }, { "name": "vmconnect.exe", "category": "windows", "original_filenames": [ "VMConnect.exe" ], "primary": "VMConnect.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vmconnect.exe/" }, { "name": "vmmap.exe", "category": "sysinternals", "original_filenames": [ "Vmmap" ], "primary": "Vmmap", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vmmap.exe/" }, { "name": "vmmap64.exe", "category": "sysinternals", "original_filenames": [ "Vmmap" ], "primary": "Vmmap", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vmmap64.exe/" }, { "name": "vmms.exe", "category": "windows", "original_filenames": [ "vmms.exe" ], "primary": "vmms.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vmms.exe/" }, { "name": "vmnat.exe", "category": "windows", "original_filenames": [ "vmnat.exe" ], "primary": "vmnat.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vmnat.exe/" }, { "name": "vmnetdhcp.exe", "category": "windows", "original_filenames": [ "vmnetdhcp.exe" ], "primary": "vmnetdhcp.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vmnetdhcp.exe/" }, { "name": "vmplatformca.exe", "category": "windows", "original_filenames": [ "VmPlatformCa.exe" ], "primary": "VmPlatformCa.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vmplatformca.exe/" }, { "name": "vmsp.exe", "category": "windows", "original_filenames": [ "vmsp.exe" ], "primary": "vmsp.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vmsp.exe/" }, { "name": "vmwp.exe", "category": "windows", "original_filenames": [ "vmwp.exe" ], "primary": "vmwp.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vmwp.exe/" }, { "name": "voiceaccess.exe", "category": "windows", "original_filenames": [ "VoiceAccess.exe" ], "primary": "VoiceAccess.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/voiceaccess.exe/" }, { "name": "volumeid.exe", "category": "sysinternals", "original_filenames": [ "volumeid.exe" ], "primary": "volumeid.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/volumeid.exe/" }, { "name": "volumeid64.exe", "category": "sysinternals", "original_filenames": [ "volumeid.exe" ], "primary": "volumeid.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/volumeid64.exe/" }, { "name": "vsdiagnostics.exe", "category": "lolbin", "original_filenames": [ "VSDiagnostics.exe" ], "primary": "VSDiagnostics.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vsdiagnostics.exe/" }, { "name": "vssadmin.exe", "category": "lolbin", "original_filenames": [ "VSSADMIN.EXE" ], "primary": "VSSADMIN.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vssadmin.exe/" }, { "name": "vssvc.exe", "category": "windows", "original_filenames": [ "VSSVC.EXE" ], "primary": "VSSVC.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vssvc.exe/" }, { "name": "vulkaninfo-1-999-0-0-0.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vulkaninfo-1-999-0-0-0.exe/" }, { "name": "vulkaninfo.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/vulkaninfo.exe/" }, { "name": "w32tm.exe", "category": "windows", "original_filenames": [ "w32time.dll" ], "primary": "w32time.dll", "sensor_verified": true, "flags": [ "differs-from-name", "dll-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/w32tm.exe/" }, { "name": "w3wp.exe", "category": "windows", "original_filenames": [ "w3wp.exe" ], "primary": "w3wp.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/w3wp.exe/" }, { "name": "wab.exe", "category": "lolbin", "original_filenames": [ "WAB.EXE" ], "primary": "WAB.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wab.exe/" }, { "name": "wabmig.exe", "category": "windows", "original_filenames": [ "WABMIG.EXE" ], "primary": "WABMIG.EXE", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wabmig.exe/" }, { "name": "waitfor.exe", "category": "windows", "original_filenames": [ "waitfor.exe" ], "primary": "waitfor.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/waitfor.exe/" }, { "name": "wallpaperhost.exe", "category": "windows", "original_filenames": [ "WallpaperHost.EXE" ], "primary": "WallpaperHost.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wallpaperhost.exe/" }, { "name": "wampluginhost.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wampluginhost.exe/" }, { "name": "wbadmin.exe", "category": "lolbin", "original_filenames": [ "WBADMIN.EXE" ], "primary": "WBADMIN.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wbadmin.exe/" }, { "name": "wbemtest.exe", "category": "lolbin", "original_filenames": [ "wbemtest.exe" ], "primary": "wbemtest.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wbemtest.exe/" }, { "name": "wbengine.exe", "category": "windows", "original_filenames": [ "wbengine.exe" ], "primary": "wbengine.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wbengine.exe/" }, { "name": "wcsetupagent.exe", "category": "windows", "original_filenames": [ "wcsetupagent.exe" ], "primary": "wcsetupagent.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wcsetupagent.exe/" }, { "name": "wdagnetdiag.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": false, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wdagnetdiag.exe/" }, { "name": "wecutil.exe", "category": "windows", "original_filenames": [ "WECUTIL.EXE" ], "primary": "WECUTIL.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wecutil.exe/" }, { "name": "werfault.exe", "category": "windows", "original_filenames": [ "WerFault.exe" ], "primary": "WerFault.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/werfault.exe/" }, { "name": "werfaultsecure.exe", "category": "windows", "original_filenames": [ "WerFaultSecure.exe" ], "primary": "WerFaultSecure.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/werfaultsecure.exe/" }, { "name": "wermgr.exe", "category": "windows", "original_filenames": [ "WerMgr" ], "primary": "WerMgr", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wermgr.exe/" }, { "name": "wevtutil.exe", "category": "windows", "original_filenames": [ "wevtutil.exe" ], "primary": "wevtutil.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wevtutil.exe/" }, { "name": "wextract.exe", "category": "windows", "original_filenames": [ "WEXTRACT.EXE " ], "primary": "WEXTRACT.EXE ", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wextract.exe/" }, { "name": "where.exe", "category": "windows", "original_filenames": [ "where.exe" ], "primary": "where.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/where.exe/" }, { "name": "whoami.exe", "category": "windows", "original_filenames": [ "whoami.exe" ], "primary": "whoami.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/whoami.exe/" }, { "name": "whois.exe", "category": "sysinternals", "original_filenames": [ "whois.exe" ], "primary": "whois.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/whois.exe/" }, { "name": "whois64.exe", "category": "sysinternals", "original_filenames": [ "whois.exe" ], "primary": "whois.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/whois64.exe/" }, { "name": "wiaacmgr.exe", "category": "windows", "original_filenames": [ "WIAACMGR.EXE" ], "primary": "WIAACMGR.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wiaacmgr.exe/" }, { "name": "wiawow64.exe", "category": "windows", "original_filenames": [ "wiawow64.exe" ], "primary": "wiawow64.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wiawow64.exe/" }, { "name": "wifitask.exe", "category": "windows", "original_filenames": [ "WiFiTask.exe" ], "primary": "WiFiTask.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wifitask.exe/" }, { "name": "wimserv.exe", "category": "windows", "original_filenames": [ "extractr.exe" ], "primary": "extractr.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wimserv.exe/" }, { "name": "winbiodatamodeloobe.exe", "category": "windows", "original_filenames": [ "WinBioDataModelOOBE.exe" ], "primary": "WinBioDataModelOOBE.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/winbiodatamodeloobe.exe/" }, { "name": "wincsflags.exe", "category": "windows", "original_filenames": [ null ], "primary": null, "sensor_verified": true, "flags": [ "no-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wincsflags.exe/" }, { "name": "windeploy.exe", "category": "windows", "original_filenames": [ "WinDeploy.exe" ], "primary": "WinDeploy.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/windeploy.exe/" }, { "name": "windows.media.backgroundplayback.exe", "category": "windows", "original_filenames": [ "Windows.Media.Playback.exe" ], "primary": "Windows.Media.Playback.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/windows.media.backgroundplayback.exe/" }, { "name": "windows.warp.jitservice.exe", "category": "windows", "original_filenames": [ "Windows.WARP.JITService.exe" ], "primary": "Windows.WARP.JITService.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/windows.warp.jitservice.exe/" }, { "name": "windowsactiondialog.exe", "category": "windows", "original_filenames": [ "WindowsActionDialog.exe" ], "primary": "WindowsActionDialog.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/windowsactiondialog.exe/" }, { "name": "windowssandbox.exe", "category": "windows", "original_filenames": [ "WindowsSandbox.exe" ], "primary": "WindowsSandbox.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/windowssandbox.exe/" }, { "name": "windowssandboxclient.exe", "category": "windows", "original_filenames": [ "WindowsSandboxClient.exe" ], "primary": "WindowsSandboxClient.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/windowssandboxclient.exe/" }, { "name": "windowsupdateelevatedinstaller.exe", "category": "windows", "original_filenames": [ "WindowsUpdateElevatedInstaller" ], "primary": "WindowsUpdateElevatedInstaller", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/windowsupdateelevatedinstaller.exe/" }, { "name": "winhlp32.exe", "category": "windows", "original_filenames": [ "WINHLP32.EXE" ], "primary": "WINHLP32.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/winhlp32.exe/" }, { "name": "wininit.exe", "category": "windows", "original_filenames": [ "WinInit.exe" ], "primary": "WinInit.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wininit.exe/" }, { "name": "winload.exe", "category": "windows", "original_filenames": [ "osloader.exe" ], "primary": "osloader.exe", "sensor_verified": false, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/winload.exe/" }, { "name": "winlogon.exe", "category": "windows", "original_filenames": [ "WINLOGON.EXE" ], "primary": "WINLOGON.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/winlogon.exe/" }, { "name": "winmgmt.exe", "category": "windows", "original_filenames": [ "winmgmt.exe" ], "primary": "winmgmt.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/winmgmt.exe/" }, { "name": "winobj.exe", "category": "sysinternals", "original_filenames": [ "WinObj.exe" ], "primary": "WinObj.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/winobj.exe/" }, { "name": "winobj64.exe", "category": "sysinternals", "original_filenames": [ "WinObj.exe" ], "primary": "WinObj.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/winobj64.exe/" }, { "name": "winresume.exe", "category": "windows", "original_filenames": [ "hiberrsm.exe" ], "primary": "hiberrsm.exe", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/winresume.exe/" }, { "name": "winrs.exe", "category": "windows", "original_filenames": [ "winrs.exe" ], "primary": "winrs.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/winrs.exe/" }, { "name": "winrshost.exe", "category": "windows", "original_filenames": [ "winrshost.exe" ], "primary": "winrshost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/winrshost.exe/" }, { "name": "winrtnetmuahostserver.exe", "category": "windows", "original_filenames": [ "WinRTNetMUAHostServer.exe" ], "primary": "WinRTNetMUAHostServer.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/winrtnetmuahostserver.exe/" }, { "name": "winsat.exe", "category": "windows", "original_filenames": [ "WinSAT.exe" ], "primary": "WinSAT.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/winsat.exe/" }, { "name": "winver.exe", "category": "windows", "original_filenames": [ "WINVER.EXE" ], "primary": "WINVER.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/winver.exe/" }, { "name": "wkspbroker.exe", "category": "windows", "original_filenames": [ "wkspbroker.exe" ], "primary": "wkspbroker.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wkspbroker.exe/" }, { "name": "wksprt.exe", "category": "windows", "original_filenames": [ "wksprt.exe" ], "primary": "wksprt.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wksprt.exe/" }, { "name": "wlanext.exe", "category": "windows", "original_filenames": [ "wlanext.exe" ], "primary": "wlanext.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wlanext.exe/" }, { "name": "wlanhelper.exe", "category": "windows", "original_filenames": [ "WlanHelper.exe" ], "primary": "WlanHelper.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wlanhelper.exe/" }, { "name": "wldp.dll", "category": "windows", "original_filenames": [ "wldp.dll" ], "primary": "wldp.dll", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wldp.dll/" }, { "name": "wlrmdr.exe", "category": "lolbin", "original_filenames": [ "WLRMNDR.EXE" ], "primary": "WLRMNDR.EXE", "sensor_verified": true, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wlrmdr.exe/" }, { "name": "wmiadap.exe", "category": "windows", "original_filenames": [ "wmicookr.dll" ], "primary": "wmicookr.dll", "sensor_verified": true, "flags": [ "differs-from-name", "dll-ofn" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wmiadap.exe/" }, { "name": "wmiapsrv.exe", "category": "windows", "original_filenames": [ "WmiApSrv.exe" ], "primary": "WmiApSrv.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wmiapsrv.exe/" }, { "name": "wmic.exe", "category": "lolbin", "original_filenames": [ "wmic.exe" ], "primary": "wmic.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wmic.exe/" }, { "name": "wmiprvse.exe", "category": "windows", "original_filenames": [ "Wmiprvse.exe" ], "primary": "Wmiprvse.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wmiprvse.exe/" }, { "name": "wmpdmc.exe", "category": "windows", "original_filenames": [ "WMPDMC.exe" ], "primary": "WMPDMC.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wmpdmc.exe/" }, { "name": "wmplayer.exe", "category": "windows", "original_filenames": [ "wmplayer.exe" ], "primary": "wmplayer.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wmplayer.exe/" }, { "name": "wmprph.exe", "category": "windows", "original_filenames": [ "wmprph.exe" ], "primary": "wmprph.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wmprph.exe/" }, { "name": "wordpad.exe", "category": "windows", "original_filenames": [ "WORDPAD.EXE" ], "primary": "WORDPAD.EXE", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wordpad.exe/" }, { "name": "workfolders.exe", "category": "lolbin", "original_filenames": [ "WorkFolders.exe" ], "primary": "WorkFolders.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/workfolders.exe/" }, { "name": "wowreg32.exe", "category": "windows", "original_filenames": [ "WOWREG32.EXE" ], "primary": "WOWREG32.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wowreg32.exe/" }, { "name": "wpcmon.exe", "category": "windows", "original_filenames": [ "WpcMon.exe" ], "primary": "WpcMon.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wpcmon.exe/" }, { "name": "wpctok.exe", "category": "windows", "original_filenames": [ "WpcTok.exe" ], "primary": "WpcTok.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wpctok.exe/" }, { "name": "wpdshextautoplay.exe", "category": "windows", "original_filenames": [ "WpdShExtAutoplay.exe" ], "primary": "WpdShExtAutoplay.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wpdshextautoplay.exe/" }, { "name": "wpnpinst.exe", "category": "windows", "original_filenames": [ "wpnpinst.exe" ], "primary": "wpnpinst.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wpnpinst.exe/" }, { "name": "wpr.exe", "category": "windows", "original_filenames": [ "WPR.exe" ], "primary": "WPR.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wpr.exe/" }, { "name": "write.exe", "category": "lolbin", "original_filenames": [ "write" ], "primary": "write", "sensor_verified": false, "flags": [ "differs-from-name" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/write.exe/" }, { "name": "wsatconfig.exe", "category": "windows", "original_filenames": [ "WsatConfig.exe" ], "primary": "WsatConfig.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wsatconfig.exe/" }, { "name": "wscadminui.exe", "category": "windows", "original_filenames": [ "wscadminui.exe" ], "primary": "wscadminui.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wscadminui.exe/" }, { "name": "wscollect.exe", "category": "windows", "original_filenames": [ "WSCollect.exe" ], "primary": "WSCollect.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wscollect.exe/" }, { "name": "wscript.exe", "category": "lolbin", "original_filenames": [ "wscript.exe" ], "primary": "wscript.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wscript.exe/" }, { "name": "wsl.exe", "category": "lolbin", "original_filenames": [ "wsl.exe" ], "primary": "wsl.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wsl.exe/" }, { "name": "wslconfig.exe", "category": "windows", "original_filenames": [ "wslconfig.exe" ], "primary": "wslconfig.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wslconfig.exe/" }, { "name": "wslhost.exe", "category": "windows", "original_filenames": [ "wslhost.exe" ], "primary": "wslhost.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wslhost.exe/" }, { "name": "wsmanhttpconfig.exe", "category": "windows", "original_filenames": [ "WSManHTTPConfig.exe" ], "primary": "WSManHTTPConfig.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wsmanhttpconfig.exe/" }, { "name": "wsmprovhost.exe", "category": "windows", "original_filenames": [ "wsmprovhost.exe" ], "primary": "wsmprovhost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wsmprovhost.exe/" }, { "name": "wsqmcons.exe", "category": "windows", "original_filenames": [ "wsqmcons.exe" ], "primary": "wsqmcons.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wsqmcons.exe/" }, { "name": "wsreset.exe", "category": "lolbin", "original_filenames": [ "WSReset.exe" ], "primary": "WSReset.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wsreset.exe/" }, { "name": "wsusservice.exe", "category": "windows", "original_filenames": [ "WsusService.exe" ], "primary": "WsusService.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wsusservice.exe/" }, { "name": "wuapihost.exe", "category": "windows", "original_filenames": [ "wuapihost.exe" ], "primary": "wuapihost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wuapihost.exe/" }, { "name": "wuauclt.exe", "category": "lolbin", "original_filenames": [ "wuauclt.exe" ], "primary": "wuauclt.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wuauclt.exe/" }, { "name": "wuaucltcore.exe", "category": "windows", "original_filenames": [ "wuaucltcore.exe" ], "primary": "wuaucltcore.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wuaucltcore.exe/" }, { "name": "wudfcompanionhost.exe", "category": "windows", "original_filenames": [ "WUDFCompanionHost.exe" ], "primary": "WUDFCompanionHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wudfcompanionhost.exe/" }, { "name": "wudfhost.exe", "category": "windows", "original_filenames": [ "WUDFHost.exe" ], "primary": "WUDFHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wudfhost.exe/" }, { "name": "wusa.exe", "category": "windows", "original_filenames": [ "wusa.exe" ], "primary": "wusa.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wusa.exe/" }, { "name": "wwahost.exe", "category": "windows", "original_filenames": [ "WWAHost.exe" ], "primary": "WWAHost.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/wwahost.exe/" }, { "name": "xblgamesavetask.exe", "category": "windows", "original_filenames": [ "XblGameSaveTask.exe" ], "primary": "XblGameSaveTask.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/xblgamesavetask.exe/" }, { "name": "xbootmgr.exe", "category": "lolbin", "original_filenames": [ "xbootmgr.exe" ], "primary": "xbootmgr.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/xbootmgr.exe/" }, { "name": "xbootmgrsleep.exe", "category": "lolbin", "original_filenames": [ "xbootmgrSleep.exe" ], "primary": "xbootmgrSleep.exe", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/xbootmgrsleep.exe/" }, { "name": "xcopy.exe", "category": "windows", "original_filenames": [ "XCOPY.EXE" ], "primary": "XCOPY.EXE", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/xcopy.exe/" }, { "name": "xwizard.exe", "category": "lolbin", "original_filenames": [ "xwizard.exe" ], "primary": "xwizard.exe", "sensor_verified": true, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/xwizard.exe/" }, { "name": "zipfldr.dll", "category": "lolbin", "original_filenames": [ "ZIPFLDR.DLL" ], "primary": "ZIPFLDR.DLL", "sensor_verified": false, "flags": [], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/zipfldr.dll/" }, { "name": "zoomit.exe", "category": "sysinternals", "original_filenames": [ "ZoomIt.exe" ], "primary": "ZoomIt.exe", "sensor_verified": true, "flags": [ "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/zoomit.exe/" }, { "name": "zoomit64.exe", "category": "sysinternals", "original_filenames": [ "ZoomIt.exe" ], "primary": "ZoomIt.exe", "sensor_verified": true, "flags": [ "differs-from-name", "shared" ], "url": "https://adversarial-detection-engineering.github.io/ofndb/b/zoomit64.exe/" } ]